4.2.2.6 Design and implement scenarios and programmes for simulating cybersecurity incidents to be used in national drills. 4.2.2.7 Implement national crisis management measures, conduct regular tests by way of cyberattack exercises and evaluate the learnings from these exercises to improve these measures. 4.2.2.8 Create and update continuously an emergency cybersecurity plan defining the roles and responsibilities of the national cybersecurity structure and the defence and security forces in the event of cyberattacks. 4.3 Strategic aim 3: promote a cybersecurity culture in Senegal Whether digitalising Senegal succeeds depends on whether organisations and individuals have confidence in online services: so the Government needs to work with the public and private sectors to increase their knowledge and understanding of the cyberthreats Senegal and its people currently face. In fact, while a number of organisations, especially in banking and telecoms, are already taking steps to protect themselves, they are still in a minority. 4.3.1 Specific aim 3.1: make all the groups concerned and the general public aware of the security risks in cyberspace. The Government will run awareness campaigns aimed at both the general public and organisations on cybersecurity risks and how to protect themselves. To do this, it will adopt a range of approaches to optimise the impact of these campaigns, and will work as required in partnership with other organisations and those which offer their customers interfaces exposed to cyberthreats in particular. Expected outcomes: 4.3.1.1 Individuals and organisations have adopted good practices to reduce the number, severity and impact of the successful cyber-attacks which occur in Senegal continuously. 4.3.1.2 Individuals and organisations understand how important cybersecurity is, what their responsibilities and obligations are and what they need to do to protect themselves, promoting a cybersecurity culture in Senegal generally. Actions: 4.3.1.1 Conduct a national study to establish how aware people are of cybersecurity at all levels of society and implement a national awareness programme to cover the various target groups. 4.3.1.2 Spread good practice in cybersecurity. 4.3.1.3 Provide mandatory cybersecurity training for senior officers and directors in the private sector so they understand the risks and threats involved better and how to mitigate them. 4.3.2 Specific aim 3.2: establish a reliable environment of confidence to provide government services online and electronic transactions Spreading online services and government services online and electronic transactions are major elements in working towards a digital Senegal. To achieve this aim, the Government must take up the crucial challenge of the security of services in Senegal. In fact, a minimum 16