Future vision and strategy regarding cyber security This is a summary of Iceland’s Future Vision 2026 on National Cyber Security and Main Strategy Aims. The Introduction describes the work of the task force which prepared the strategy and action plan; subsequently presenting a survey of various cyber security threats and stressing the importance of tackling them. This is followed by a discussion of how well Iceland is prepared to deal with these threats and what can be done to take the initiative and use cyber security as a means of promoting progress and welfare. Future Vision 2026 Iceland should have an Internet culture that is sound, promotes human rights, protects the individual and respects freedom of action to support economic prosperity and development. Security in cyber space should be one of the main cornerstones of economic prosperity in Iceland, resting on a foundation of sophisticated awareness of security issues and adequate legislation. At the same time, Iceland must be prepared to tackle cybercrime, respond to cyber-threats and take measures to prevent espionage and the abuse of personal and commercial data. Main strategy aims 1. Capacity building. The public, enterprises and government should have the knowledge, skills and equipment needed to cope with cyber security threats. 2. Increased resilience. Key factors in enhanced resilience are greater capacity in the fields of assessment, preparedness and response. The aim is to raise the resilience of Iceland’s information systems and their preparedness to a level comparable with that of the other Nordic countries. This should be done through, amongst other things, improving capacity in threat assessment, enhanced cooperation and making security concerns an integral part of the maintenance of cyber systems. 3. Strengthened legislation. Icelandic legislation should reflect the international demands and obligations the country undertakes regarding cyber security and the protection of personal data. Furthermore, legislation must also support innovation and the development of security-related services, e.g. hosting. 4. Tackling cybercrime. The police should have, or have access to, the professional knowledge, skills and equipment needed to resolve issues concerning cyber security. 3