FOREWORD ● resolve it swiftly, RIA’s cyber reserve can be deployed. This is not just a theoretical concept – it has already been activated on three occasions and tested in large-scale exercises at all operational levels. Photo: Jake Farra EVERYONE HAS A ROLE IN CYBERSECURITY Gert Auväärt Hackers infiltrated US telecommunications companies, Romanian authorities annulled the first round of their presidential election due to cyber interference, and major data breaches and software failures shook the global economy. Cyberattacks are no longer just a technological issue: they affect elections, economies and even the fundamental structures of society. Estonia’s success as a digital state brings with it a significant responsibility. The number of national databases has tripled over the past decade, increasing the attack surface and highlighting the need for effective shared cybersecurity solutions – both in the public and the private sector. This is where RIA plays a crucial role: by providing central services such as X-Road and authentication solutions, we reduce redundancy and allow organisations to focus on their core activities. Another key asset is RIA’s unique cyber reserve, which is composed of experts from RIA, other state IT agencies and the Estonian Defence League’s Cyber Unit. If a cyber incident severely disrupts a critical service and the affected organisation lacks the capacity to CYBER SECURITY IN ESTONIA 2025 At its core, cybersecurity is about people. The protection of personal and business data hinges on strong cybersecurity knowledge. That is why we placed significant emphasis last year on increasing cyber awareness. We organised well-received workshops for older adults, provided targeted guides for young people, and updated the prevention portal itvaatlik.ee with practical advice on recognising scams and reporting incidents. Not everyone needs to be an expert, but reliable information must be easily available. RIA’s Cyber Test has already helped over 21,000 people improve their cybersecurity skills in just two years, making it a valuable tool not only for individuals but also for businesses and institutions. The protection of personal and business data hinges on strong cybersecurity knowledge. As technology advances and cybercriminals refine their methods, we will likely face even more sophisticated threats in the future, including AI-driven attacks and large-scale data breaches. Sustainable security requires integrating cybersecurity into all processes and embedding it in everyday life. This year’s report is more than just a retrospective. It is a call to action – for individuals, organisations and the nation as a whole. Only by working together can we keep Estonia’s cyberspace secure today and prepared for the challenges of tomorrow. ● 7