Multi-stakeholder consultation processes have been followed and observations fed back to the identified strategy owners. A well-attended consultative meeting with stakeholders was held in 2014 including about representatives of some 60 institutions and enterprises. The NCSS called for the appointment of a special Cyber Security Council (CSC) for government and public sector representatives and a Cyber Security Forum with representatives from private sectors in addition to the representatives in the CSC. The CSC takes responsibility for implementing the strategy while the Cyber Security Forum is charged with coordinating projects involving public and private stakeholders and creating the basis for collaboration on cybersecurity topics. The CSC will coordinate measures, particularly those involving government bodies. It will review the action plan at least once a year and make proposals on the prioritisation and funding of measures taken. The CSC is according to the NCSS to submit a report to the MoI every year on the implementation of the strategy. The MoI was divided into two new ministries on 1 May 2017, the Ministry of Justice and the Ministry of Transport and Local Government (MoTLG)13. Since then the Ministry of Transport and Local Government (MoTLG) has been the designated coordinating body with a mandate to work towards the revision and the implementation of the National Cyber Security Strategy and the Action Plan and has started to consult across public and private sectors, and with civil society. The scope of responsibility of the MoTLG is as follows: air, land, and sea transport; electronic communications; information society issues; local government issues; regional development issues; and matters relating to Registers Iceland. A review process (every 3-4 years) is implemented under the auspices of the Action Plan 20152018 to allow for new or revised measures, including for short periods of time. The content of the NCSS is linked explicitly and directly to national assessments of risks, priorities and objectives, as well as business development. Direct and indirect links exist to many other official strategies and resolutions, e.g. the national strategy on civil protection public security, law enforcement and telecommunications; the strategy on national security; and the Icelandic State and Municipal Policy on the Information Society 2013-2016: “e-Power Expansion: - create, connect, participate“. The NCSS addresses the need to protect critical infrastructure as well as respond to growing cybersecurity threats. It outlines Iceland’s cybersecurity vision out to 2026 and stipulates four main objectives: 1) increased capacity to prevent and respond to cybersecurity threats; 2) increased resilience; 3) improved legislation in line with international commitments; and 4) reliable law enforcement as regards cybersecurity. The strategy covers all use of the Internet and Information Technology. The aims of the strategy are as follows: a) to enhance the security of individuals and groups in society by increasing cyber security; b) to promote the integrated functioning of important elements of the infrastructure of society by increasing the resilience of information systems to cope with hazards; and c) to establish closer collaboration and coordination on cybersecurity between Icelandic and international authorities. 13 https://www.government.is/news/article/2017/05/01/Two-new-ministries-commence-operation/ 19 | Cybersecurity Capacity Review Iceland, 2017