Table of Contents 5.2.2 Identify a common methodology for managing cybersecurity risk 39 5.2.3 Develop sectoral cybersecurity risk profiles 39 5.2.4 Establish cybersecurity policies 40 5.3 Focus area 3 – Preparedness and resilience 40 5.3.1 Establish cyber-incident response capabilities 40 5.3.2 Establish contingency plans for cybersecurity crisis management 41 5.3.3 Promote information-sharing 41 5.3.4 Conduct cybersecurity exercises 41 5.4 Focus area 4 – Critical infrastructure services and essential services 5.4.1 Establish a risk-management approach to protecting critical infrastructures and services 42 43 5.4.2 Adopt a governance model with clear responsibilities 43 5.4.3 Define minimum cybersecurity baselines 43 5.4.4 Utilise a wide range of market levers 44 5.4.5 Establish public private partnerships 44 5.5 Focus area 5 – Capability and capacity building and awareness raising 5.5.1 Develop cybersecurity curricula 5.5.2 Stimulate skills development and workforce training 45 45 45 5.5.3 Implement a coordinated cybersecurity awareness-raising programme 46 46 5.5.4 Foster cybersecurity innovation and R&D 5.6 Focus area 6 – Legislation and regulation Establish cybercrime legislation 46 5.6.1 5.6.2 Recognise and safeguard individual rights and liberties 47 5.6.3 Create compliance mechanisms 47 5.6.4 Promote capacity-building for law enforcement 47 5.6.5 Establish inter-organisational processes 48 5.6.6 Support international cooperation to combat cybercrime 48 Guide to Developing a National Cybersecurity Strategy 47 3