CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND Table of contents Gaining the capacity to perform a full spectrum of military operations in cyberspace 24 Specific objective 4 – Building public awareness and competences in the area of cybersecurity 25 8.1 Increasing competence of the staff of entities relevant to ensuring cybersecurity of the Republic of Poland 25 8.2 Creating conditions for the safe use of cyberspace by citizens 26 8.3 Developing public awareness towards the safe use of cyberspace 26 Specific objective 5 – Building strong international position of the Republic of Poland in the area of cybersecurity 27 7.4 Table of contents 4 1. Introduction – rationale for actions to increase cybersecurity 6 2. Strategic context of cybersecurity in the Republic of Poland 8 3. Scope of the Cybersecurity Strategy of the Republic of Poland for 2019–2024 9 4. Vision, main goal, specific objectives 10 4.1 Vision 10 4.2 Main goal 10 4.3 Specific objectives 11 9.1 Active international cooperation at the strategic and political level 27 Specific objective 1 – Development of the national cybersecurity system 12 9.2 Active international cooperation at the operational and technical level 29 10. Managing the Cybersecurity Strategy of the Republic of Poland 30 11. Funding 31 5. 5.1 Implementation and evaluation of the functioning of the provisions regarding the national cybersecurity system 12 5.2 Enhancing the efficiency of the functioning of the national cybersecurity system 14 5.3 Development of an information sharing system for the purpose national security management 15 5.4 Enhancing cybersecurity of essential and digital services and critical infrastructure 15 5.5 Development and implementation of a risk assessment methodology at the national level 16 5.6 Increasing capacity to counteract cybercrime, including cyberespionage and incidents of a terrorist nature 17 Specific objective 2 – Increasing the level of resilience of information systems of the public administration and private sector, and achieving the capacity to effectively prevent and respond to incidents 18 6.1 Development and implementation of National Cybersecurity Standards and disseminate of good practices and recommendations 19 6.2 Supply chain security 19 6.3 Security tests and audits 21 Specific objective 3 – Increasing the national capacity in the area of cybersecurity technology 22 7.1 Development of industrial and technological resources for the purposes of cybersecurity 22 7.2 Focus on developing of public-private cooperation 22 7.3 Stimulating research and development in the area of cybersecurity 23 6. 7. 4 8. 9. 5