NATIONAL CYBER SECURITY STRATEGY GREEN PAPER 3 OVERALL DIRECTION WHAT IS MEANT BY CYBER SECURITY? Definitions for cyber security abound, however they all essentially point to the security of the cyber space; namely all: • • • • Interconnected ICT hardware and software infrastructure Data in transit and at rest on the networks Connected users Logical connections established among them “ABOVE ALL, CYBER SECURITY CANNOT BE SEEN FROM A TECHNOLOGICAL ASPECT ONLY, BUT NEEDS TO COVER THE NEEDS AND EXPECTATIONS OF THE STATE, THE ECONOMY AND SOCIETY, ALL OF WHICH ARE INCREASINGLY ACTIVE PARTICIPANTS IN AN INTERACTIVE DIGITAL WORLD.” In view of the above1, the following definition of cyber security is being adopted: It is the safeguards and actions that can be used to protect cyber domain from those threats that are associated with or that may harm its interdependent networks and information infrastructure. It strives to preserve the availability and integrity of the networks and infrastructure and the confidentiality of the information contained therein. Essentially, cyber security is based upon the foundations of information security, namely confidentiality, integrity and availability. However, whilst information security is business driven and results in prudent investment in safeguards and countermeasures, cyber security is threat driven where all cyber space is at risk. The inherent interconnectedness of cyber space exposes all of its constituents to a failure of their most vulnerable elements2. Additionally effective cyber security cannot be reached by technological measures alone as modern cyber attacks could bypass all defence layers by exploiting the human factors through techniques such as social engineering3. Hence, safeguards and actions hereby refer to ongoing and planned measures which may potentially be of technical, governance, legal, educational, behavioural or disseminative nature. Above all, cyber security cannot be seen from a technological aspect only, but needs to cover the needs and expectations of the state, the economy and society, all of which are increasingly active participants in an interactive digital world. 10 MALTA | NATIONAL CYBER SECURITY STRATEGY GREEN PAPER