It is a fact that cyber space provides advantages such as anonymity and deniability for the attacks made to information systems and information/data. It is difficult to detect the financers and organizers of persistent and advanced cyber-attacks targeting information systems and data. This situation and characteristics reveal asymmetric character of risks and threats in cyber space and make it difficult to fight with these threats. Ensuring absolute cyber security is no longer achievable in such an environment. So instead, the aim is to keep cyber security risks at manageable and acceptable levels. It is acknowledged that being in an open and connected environment such as the Internet present certain risks with increased accessibility. The objective must be being prepared for cyber incidents by managing risks with a holistic approach that includes all stakeholders and assuring continuity by mitigating these incidents with minimum loss. 1.1 National Cyber Security Strategy and 2013-2014 Action Plan In light of this information, the Ministry of Transportation, Maritime and Communication has been given the duty of preparing the policy, strategy and action plans for providing national cyber security and ensuring coordination, pursuant to “The Council of Ministers’ Decision on the Execution, Management and Coordination of National Cyber Security Activities” that was published in 2016-2019 National Cyber Security Strategy 4/26