4.1.3 Specific aim 1.3: establish cybersecurity standards, guidelines and an operational and technical framework Senegal will develop and implement standards and guidelines and operational structures to ensure that public and private sector organisations and those who own and operate critical information infrastructures (CIIs) and our citizens adopt good practices and common actions in the field of cybersecurity. These practices and measures must be founded on the national definition of cybersecurity in Senegal. Desired outcomes: 4.1.3.1 Clear, understandable and appropriate cybersecurity standards and guidelines are issued, an operational and technical framework, processes and procedures are established and respected in Senegal. Actions: 4.1.3.1 Issue a set of cybersecurity standards based on international standards but adapted to national level, including on software and writing its source code. 4.1.3.2 Implement an operational and technical management charged with issuing cybersecurity standards and monitoring that they are applied. 4.1.3.3 Promote awareness and implement standards in public and private sectors, amongst SMEs above all. 4.2 Strategic aim 2: strengthen the protection of critical information infrastructures (CIIs) and government information systems in Senegal The systems and networks which make up cyberspace must be able to keep working during and after cyber-incidents. That is why protecting our Government's systems and networks and those of CIIs are an absolute priority as far as the Government is concerned. The Government will work to ensure that CIIs and Senegalese information systems as a whole can withstand cyber-attacks. For this, it is essential that private sector organisations and their managers and Boards in particular are not just aware of their responsibilities and obligations, but also have the right support to enable them to implement adequate measures to meet cyberthreats. 4.2.1 Specific aim 2.1: ensure critical information infrastructures are protected and that Senegal's information systems are safe To ensure CIIs are protected and Senegal's IT systems are secure, the Government must first understand what their vulnerabilities are. Expected outcomes: 4.2.1.1 An exhaustive survey of the vulnerabilities and security levels of the CIIs and Senegal's information systems is available. 4.2.1.2 Design and implement essential measures to improve and showcase how secure Senegal's CIIs and information systems are. 14