Specific aim 2.2: monitor cyber-threats and manage risks at all times Expected outcomes • • • A coordinated national approach and implementation of incident management have been adopted, supported by a survey of cyber-threats. A better understanding of the size and scale of cyber-threats now exists in Senegal since cyber-incidents were reported to the national cybersecurity structure. Senegal has a more complete, effective and efficient management of cyber-incidents now there is a central agency for reporting incidents and responses to the national cybersecurity structure. Strategies/ Actions Lead and support agencies Deliverables/ outcomes Deadline Key performance indicators Possible funding sources 2.2.1 Define minimum requirements for keeping incident logs required to analyse them ADIE; MINT; MFA Minimum requirements for keeping incident logs December 2018 How many entities are adopting and implementing cybersecurity incident reporting requirements? ADIE; MINT: MFA CERT/ CSIRT Estimated cost (XOF) 25,000,000 CERT/CSIRT Analyse and draw reliable conclusions from cybersecurity incidents 2.2.2 Monitor, analyse and manage threats and their risks, mitigate, prepare for, respond to and recover from incidents ADIE; CERT/CSIRT Measures to mitigate threats and risks and resolve incidents December 2018 How often are national risk and incident logs updated? ADIE; 25,000,000 National cybersecurity structure How often are measures designed and applied to mitigate and resolve threats and risks? 35