“Development of a framework for the reporting of cyber incidents between government and industry is considered a priority. This includes the government sharing information with industry and, where possible, providing the research community with cyber-security event data.”