-Official Year 2021 - Issue 7 Journal Policy Specific objective Sub-Objective NECCA Specific Objective A - Improving the legal framework providing norms and regulating cybersecurity in the country and aligning this framework with European Union directives and regulations. A.1 Improving cybersecurity regulatory framework in line with sector laws, to appropriately address and resolve issues including, but not limited to IoT, 5G technology, artificial intelligence. A.2 Continuously adapting standards and rules to the developments of the cybersecurity field. NECCA NECCA NECCA NECCA 2023 2024 2025 MTBP Donors Other Gap 78,000 62,400 15,600 - 78,000 - 78,000 62,400 15,600 - 78,000 - 78,000 62,400 15,600 - 78,000 - 61,200 61,200 - - 61,200 - 140,400 46,800 46,800 46,800 140,400 187,200 62,400 62,400 62,400 187,200 - 622,800 357,600 156,000 109,200 - - - - - - PA A.2.2 Drafted procedures for cyber incidents identification - - - - - - - - - - - - - - - - - - - - - - - - - - - PA PA NECCA NECCA NECCA NECCA A.2.3 Periodic reports on measuring the adaptability and efficiency of the national regulation on cybercrime A.2.4 Strategies and policies on cyber protection of classified systems, drafted and approved. A.2.5 Technical procedures and policies on cyber protection of classified systems Subtotal A.2 A.3.1 Aligning local and international cybercrime policies A.3.2 Aligning local and North Atlantic Treaty Organization cybercrime policies A.3.3 Actively partaking in periodic meetings of NATO initiatives, such as CDMB, MISP, etc. A.3.4 Partaking in joint cyber drills organized by NATO, coordinated with national security and protection institutions Subtotal A.3 A.4.1 Risk assessment methodology at the national level, drafted and approved. Policy Goal 1 Subtotal A.4 NECCA B.1.1 Establishing a structure within CISD, which will play the role of the National Cyber Protection Authority for systems treating “state secret” classified information, according to DCM No. 542, dated 25.07.2019, “On Approving the Regulation “On Securing Classified Information handled in Information and Communication Systems (ICS)” B.1.2 Procedures on operating the National CSIRT, drafted and approved NECCA B.1.3 Approved structure and responsibilities of the National CSIRT. NECCA NECCA B.1.4 Reporting system for security break events in IT systems, developed and operational B.1.5 Assessment and monitoring sector CSIRT capacities, developed NAIS NAIS B.1.6 Optimizing and extending security infrastructures. B.1.7 Improving hardware structures. Establishing a control system for access to Gov NET. network. Subtotal B.1 - - - - - 622,800 0 0 - - 0 - - - - 244,800 81,600 81,600 81,600 2,925,000 975,000 975,000 975,000 2,925,000 3,412,500 1,137,500 1,137,500 1,137,500 3,412,500 - - - - 244,800 81,600 81,600 81,600 244,800 867,600 81,600 439,200 81,600 237,600 81,600 190,800 18,450,724 5,464,108 0 - - - - - 244,800 - - - - - 244,800 - - 244,800 867,600 6,493,308 6,493,308 - - - - 91,800 61,200 30,600 - 91,800 - - - - 52,000 106,525,000 52,000 28,037,000 53,647,000 24,841,000 52,000 106,525,000 107,880,000 29,389,000 53,649,000 24,842,000 107,880,000 232,999,524 63,003,308 113,819,908 56,176,308 - 0 - 0 - 18,450,724 - - - - 233,867,124 - - - - B.2 Creating optimal work conditions for CSIRT operation, in line with the duties to guarantee cybersecurity in critical and important information infrastructure. NAIS B.2.1 Procedures on operating the Government CSIRT, drafted 46,800 46,800 - - 46,800 - NECCA B.2.2 Assessment and monitoring capacities for implementing the sector CSIRT methodology establishment, developed 61,200 61,200 - - 61,200 - 108,000 108,000 - - B.3 Building CSIRT capacities through training and cyber drills. NECCA 62,400 62,400 - - 62,400 920,000 982,400 920,000 982,400 - - - - 920,000 982,400 234,089,924 64,093,708 113,819,908 56,176,308 - - 234,957,524 124,800 - - - Subtotal B.2 NECCA B.3.1 Study and training programs in cybersecurity, developed and implemented. B.3.2 Cyber drills at the national level, minimum 4 times a year Subtotal B.3 Subtotal B Specific Objective C Strengthening and implementing security measures in critical and important information infrastructure 2022 A.2.1. Drafted procedures for cybercrime identification CISD Specific Objective B - Establishing and operation of CSIRTs in all industry sectors nationally 2021 PA Subtotal A B.1 Establishing the National CSIRT and new sector CSIRTs in critical and important information infrastructures, and strengthening existing ones Cost in ALL Total cost A.1.6 Regulation on providing safe internet in public spaces, drafted and approved Subtotal A.1 PA A.4 Defining a national procedure for extraordinary situations created by cyber crises, with the aim of taking concrete measures to resolve the situation in real-time. A.1.1 DCM “On some Addenda and Amendments to DCM No. 69/2016 “On Approving the Regulation on Electronic Identification and Trusted Services”, drafted and approved A.1.2 DCM “On some Addenda and Amendments to DCM No. 222, dated 26.04.2018, “On Approving Critical Information Infrastructure List and Important Information Infrastructure List”, drafted and approved A.1.3 Drafted and approved legal and sub-legal acts on cybercrime, considering the applicable legal framework in the Republic of Albania and the EU. A.1.4 Analyzing the legal and institutional gap in EU Directives and Regulations regulating cybersecurity A.1.5 Approved aligned legislation NECCA PA A.3 Meeting engagements undertaken regarding cyberspace as a member country of the North Atlantic Treaty Organization. Results Responsible institution C.1 Using advanced hardware and software solutions to identify, prevent and manage cyber incidents. NAIS C.1.1 researching strengthening national priorities as a basis to envisage cybersecurity development investments. Subtotal C.1 C.2 Analyzing critical and important information infrastructure to assess their risk management NECCA - - - - C.2.1 Procedures for reducing and managing risks in cyberspace, drafted and approved 124,800 62,400 62,400 - Subtotal C.2 124,800 62,400 62,400 - - - 108,000 - - - - - - - - 124,800 - - - - - 124,800 - - 124,800 -