2.1.3 Establish a framework for managing the vulnerabilities of government CIIs and information systems to encourage monitoring them regularly ADIE; CERT/CSIRT A directory of vulnerabilities, management framework and disclosing vulnerabilities December 2018 How far is the framework for managing and disclosing vulnerabilities being applied? ADIE; 25,000,000 CERT/CSIRT (national cybersecurity structure) How often directory of vulnerabilities is updated How often are vulnerability disclosures updated? 2.1.4 Conduct tests and other regular monitoring activities of Senegal's CIIs and information systems ADIE; CERT/CSIRT Tests and other regular monitoring activities of CIIs and information systems December 2018 How many tests and other monitoring activities are conducted ADIE; 25,000,000 CERT/CSIRT (national cybersecurity structure) How often tests and other monitoring activities are conducted How effective tests and other monitoring activities are; 2.1.5 Define minimum security requirements for CIIs and information systems in Senegal. ADIE CNC National cybersecurity structure Minimum security requirements for CIIs and information systems December 2019 How far are the minimum security requirements for CIIs and information systems being applied? ADIE CNC 25,000,000 National cybersecurity structure 34