- Strategic: At this stage choices have been made about which indicators of this aspect are important, and which are less important for the particular organisation or state. The strategic stage reflects the fact that these choices have been made, conditional upon the state’s or organisation's particular circumstances. - Dynamic: At this stage, there are clear mechanisms in place to alter strategy depending on the prevailing circumstances such as the technological sophistication of the threat environment, global conflict or a significant change in one area of concern (e.g. cybercrime or privacy). Dynamic organisations have developed methods for changing strategies in stride. Rapid decision-making, reallocation of resources, and constant attention to the changing environment are features of this stage. Figure 1 below provides an overall representation of cybersecurity capacity in the Republic of Iceland and illustrates the maturity estimates in each dimension. Each dimension represents one fifth of the graphic, with the five stages of maturity for each factor extending outwards from the centre of the graphic; ‘start-up’ is closest to the centre of the graphic and ‘dynamic’ is placed at the perimeter. Figure 1: Overall representation of the cybersecurity capacity in the Republic of Iceland 5 | Cybersecurity Capacity Review Iceland, 2017