process a great amount of personal data on a daily basis, i.e. financial institutions, insurance, IT, marketing etc. R2.17 Employ effectiveness metrics for all existing mechanisms and ensure that they contribute to their improvement. MEDIA AND SOCIAL MEDIA R2.18 Encourage media and social media providers to further extend the coverage beyond threat reporting and focus on informing the public about proactive and actionable cybersecurity measures, as well economic and social impacts. R2.19 Encourage a frequent discussion about cybersecurity on social media. R2.20 Ensure that the debate in social and mainstream media and the attitudes expressed inform policymaking. 39 | Cybersecurity Capacity Review Iceland, 2017