RESTRICTED ERS-18-MIN-0004 Cabinet External Relations and Security Committee Minute of Decision ig ita lM ed ia This document contains information for the New Zealand Cabinet. It must be treated in confidence and handled in accordance with any security classification, or other endorsement. The information can only be released, including under the Official Information Act 1982, by persons with the appropriate authority. Refresh of New Zealand's Cyber Security Strategy and Action Plan D Broadcasting, Communications and Digital Media ic at io ns On 27 March 2018, the Cabinet External Relations and Security Committee: an d Portfolio noted that on 3 November 2015, the previous government approved the New Zealand Cyber Security Strategy, the supporting Action Plan, and the National Plan to Address Cybercrime [NSC-15-MIN-0012]; 2 noted that the Cyber Security Strategy, the Action Plan and the associated National Plan to Address Cybercrime have provided an overarching framework for cross-government work under four goals (cyber resilience, cyber capability, addressing cybercrime, and international cooperation), and that good progress has been made; 3 noted that New Zealand is affected by increasing malicious cyber activity, with widespread use of connected devices and emerging technology intensifying the challenge; 4 noted that, in the face of increasing malicious cyber activity, cyber security is essential to building a connected nation, promoting digital rights, online trust and confidence, and harnessing the value of digital technology for economic growth, community benefit, and innovation; 5 noted that the Minister of Broadcasting, Communications and Digital Media intends to develop a Digital Strategy for New Zealand to achieve a joined-up response by government to digital technologies; 6 agreed that, complementary to the planned Digital Strategy and the government’s other digital initiatives, it is timely to undertake a comprehensive refresh of New Zealand’s cyber security settings to ensure that the government is investing the right resources in the right way across government to respond to growing cyber security threats; se d by th e M in is te ro fB ro ad ca st in g, C om m un 1 R el ea 7 8 directed the National Cyber Policy Office within the Department of the Prime Minister and Cabinet to lead this refresh in close collaboration with the full range of relevant government agencies, private sector and non-government organisation partners, and analysis of international best practice; agreed that the refresh of New Zealand’s Cyber Security Strategy and Action Plan will propose new actions to improve New Zealand’s cyber security, including possible recommendations in the following areas: 8.1 institutional cyber security arrangements; 1 4iz7hypmdw 2018-04-04 16:36:47 RESTRICTED