10.0 References 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. NIST Framework: https://medium.com/@musttrn/nist-cybersecurity-framework-processstructure-e847e7a45829 Cyber Security Maturity Models: https://innovationatwork.ieee.org/what-is-a-cyber-securitymaturity-model/ CMMI Cybersecurity Maturity Models: https://www.huntsmansecurity.com/blog/understandingcyber-security-maturity-models/ Cyber Security talent shortage: https://www.issa.org/cybersecurity-skills-crisis-worsens-forfourth-year-in-a-row-impacting-70-of-organizations/ Cyber Security Definition: https://www.kaspersky.com/resource-center/definitions/what-iscyber-security Misinformation: https://www.cfr.org/blog/misinformation-threat-democracy-developing-world Disinformation: https://ec.europa.eu/digital-single-market/en/tackling-online-disinformation Critical Infrastructure: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/publicsector/us-public-sector-cybersecurity-critical-infrastructure.pdf U. Global Cyber Security Capacity Centre - University of Oxford, “The CMM,” Global Cyber Security Capacity Centre, Mar. 31, 2016. https://gcscc.web.ox.ac.uk/the-cmm (accessed Oct. 26, 2020) OCSC, “The CMM,” Oceania Cyber Security Centre. https://ocsc.com.au/capacity-initiatives/thecmm/ (accessed Oct. 26, 2020). “GCSCC University Of Oxford.” https://www.itu.int/en/ITU-D/Cybersecurity/Pages/GlobalPartners/GCSCC-university-oxford.aspx (accessed Oct. 26, 2020). What is a Malware? https://www.mcafee.com/en-us/antivirus/malware.html ISO 27001 Standard: https://www.iso.org/standard/54534.html Ransomware: https://www.malwarebytes.com/ransomware/ NIST – Cyberspace definition - https://csrc.nist.gov/glossary/term/cyberspace TrendMicro – Cybercriminals definition - https://www.trendmicro.com/vinfo/us/security/definition/ cybercriminals NIST – Cyber-attack definition - https://csrc.nist.gov/glossary/term/Cyber_Attack TLP - https://www.first.org/tlp/ Vanuatu’s Cyber Security Strategy 2030 | 46

Select target paragraph3