Document Generated: 2022-06-22 Status: This is the original version (as it was originally made). (a) safeguarding national security, including protecting information the disclosure of which the person considers is contrary to the essential interests of the United Kingdom’s security; and (b) maintaining law and order, in particular, to allow for the investigation, detection and prosecution of criminal offences(13). (6) These Regulations apply to— (a) the United Kingdom, including its internal waters; (b) the territorial sea adjacent to the United Kingdom; (c) the sea (including the seabed and subsoil) in any area designated under section 1(7) of the Continental Shelf Act 1964(14). PART 2 The National Framework The NIS national strategy 2.—(1) A Minister of the Crown must designate and publish a strategy to provide strategic objectives and priorities on the security of network and information systems in the United Kingdom (“the NIS national strategy”). (2) The strategic objectives and priorities set out in the NIS national strategy must be aimed at achieving and maintaining a high level of security of network and information systems in— (a) the sectors specified in column 1 of the table in Schedule 1 (“the relevant sectors”); and (b) digital services. (3) The NIS national strategy may be published in such form and manner as the Minister considers appropriate. (4) The NIS national strategy may be reviewed by the Minister at any time and, if it is revised following such a review, the Minister must designate and publish a revised NIS national strategy as soon as reasonably practicable following that review. (5) The NIS national strategy must, in particular, address the following matters— (a) the regulatory measures and enforcement framework to secure the objectives and priorities of the strategy; (b) the roles and responsibilities of the key persons responsible for implementing the strategy; (c) the measures relating to preparedness, response and recovery, including cooperation between public and private sectors; (d) education, awareness-raising and training programmes relating to the strategy; (e) research and development plans relating to the strategy; (f) a risk assessment plan identifying any risks; and (g) a list of the persons involved in the implementation of the strategy. (6) The Minister must communicate the NIS national strategy, including any revised NIS national strategy, to the Commission within three months after the date on which the strategy is designated under paragraph (1). (13) See Article 1(6) of Directive 2016/1148. (14) 1964 c. 29. Section 1(7) of the Continental Shelf Act 1964 was amended by section 37 of, and Schedule 3 to, the Oil and Gas (Enterprise) Act 1982 (c. 23), and section 103 of the Energy Act 2011 (c. 16). 4