TABLE OF CONTENTS ACRONYMS ......................................................................................................................................................... I FOREWORD ....................................................................................................................................................... 4 1. ISSUE .......................................................................................................................................................... 5 1.1. INTRODUCTION ........................................................................................................................................... 5 1.2. CONTEXT ............................................................................................................................................................ 5 1.3. BACKGROUND .................................................................................................................................................... 6 1.4. CURRENT STATUS OF CYBER SECURITY ........................................................................................................ 7 1.5. PRINCIPLES ........................................................................................................................................................ 8 2. THE NATIONAL CYBER SECURITY POLICY .................................................................................... 9 2.1. MISSION ............................................................................................................................................................. 9 2.2. STRATEGIC OBJECTIVES ................................................................................................................................... 9 2.3. KEY POLICY AREAS .......................................................................................................................................... 9 POLICY AREA 1 – CYBER SECURITY CAPABILITIES......................................................................................................... 9 POLICY AREA 2 – INSTITUTIONAL FRAMEWORK FOR CYBER SECURITY ................................................................ 10 POLICY AREA 3 – CYBER SECURITY LEGAL AND REGULATORY FRAMEWORK ....................................................... 11 POLICY AREA 4 – CRITICAL INFORMATION INFRASTRUCTURE PROTECTION (CIIP) .......................................... 11 POLICY AREA 5 – GOVERNMENT CYBER SECURITY ENHANCEMENT PROGRAM .................................................. 12 POLICY AREA 6 – CYBER SECURITY CAPACITY BUILDING AND AWARENESS......................................................... 13 POLICY AREA 7 – BUILDING A CYBER SECURITY INDUSTRY ..................................................................................... 14 POLICY AREA 8 – INTERNATIONAL COOPERATION ..................................................................................................... 14 3. INSTITUTIONAL FRAMEWORK ....................................................................................................... 15 3.1. PROPOSED INSTITUTIONAL FRAMEWORK FOR IMPLEMENTATION ....................................................... 15 3.2. INSTITUTIONAL ROLES ................................................................................................................................. 15 THE NATIONAL CYBER SECURITY ADVISORY BOARD (NCSAB) .............................................................................. 15 THE AGENCY IN CHARGE OF CYBER SECURITY .......................................................................................................... 15 4. FINANCIAL AND LEGAL IMPLICATIONS........................................................................................ 16 4.1. FINANCIAL IMPLICATIONS ............................................................................................................................ 16 4.2. LEGAL IMPLICATIONS .................................................................................................................................... 16 iii

Select target paragraph3