CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND 10.Managing the Cybersecurity Strategy of the Republic of Poland T he Cybersecurity Strategy is adopted for a period of 5 years. The implementation of the Cybersecurity Strategy is coordinated by the minister competent for digitalisation. The document is subject to review and evaluation two years after its adoption and in the fourth year of its term. The outcomes of the review are presented to the Council of Ministers. As a result of the review, the minister competent for digitalisation shall draft a proposal of corrective actions or a draft document for the next five-year period. Where justified, the Cybersecurity Strategy may be updated at dates other than said above. Within six months of the adoption of the Cybersecurity Strategy, the Coordinator - in cooperation with members of the Council of Ministers, heads of central offices, Director of the Government Centre for Security and other authorities listed in the Act of 5 July 2018 on the national cybersecurity system - shall develop an Action Plan for the Implementation of the Cybersecurity Strategy and submit it to the Council of Ministers for approval. When developing the Action Plan, the above-mentioned authorities shall take into account in their activities the issues of cybersecurity in accordance with their statutory remit. The Action Plan shall include, in particular: • • • • 30 name of a specific objective; name of the task; name of the action serving the accomplishment of the task; type of action – legislative, organisational, technological, educational, informational, promotional, other; • • • • 11. Funding schedule – the start and end date of the initiative concerned; authority or authorities – the leading authority and authorities cooperating in the execution of the task (if any); expected impacts; estimated cost. The Action Plan includes project-type actions with the start and end date of execution and deliverables. The Minister of National Defence may, in consultation with the Coordinator, develop a separate Action Plan which is subject to an approval by the President of the Council of Ministers. Elements of the Action Plan which contain classified information are subject to the provisions of the Act of 5 August 2010 on the protection of classified information (Journal of Laws of the Republic of Poland, item 742). The Minister of National Defence sends, for the purposes of information and coordination, the accepted Action Plan to the minister competent for digitalisation and the Government Plenipotentiary for Cybersecurity. The Coordinator shall annually develop a progress report on the implementation of the Cybersecurity Strategy for the previous year on the basis of information received from the entities involved in its execution. The reports shall be submitted to the Council of Ministers by 30 September. E ntities carrying out public tasks are required to include expenditures on cybersecurity in their financial plans in accordance with the relevant regulations. These expenditures have additionally included outlays on expansion of the national cybersecurity system and expenditures incurred on the execution of other projects as part of the Action Plan for the Implementation of the Cybersecurity Strategy. The detailed size and structure of costs of individual projects shall be determined in the process of initiation of specific projects. Estimation of the funding costs for the of the Cybersecurity Strategy shall take place within the framework of the Action Plan. Funding sources for the execution of measures laid down in the document shall be financial plans of authorities involved in the implementation of the Cybersecurity Strategy as well as funds from the National Centre for Research and Development and from the European Union13, as far as possible. If a separate Action Plan is developed, the Minister of National Defence submits a report on the execution of that Action Plan to the Council of Ministers via the Coordinator. EU programmes providing for funding of cybersecurity-related projects include, in particular: Horizon 2020 and Connecting Europe Facilities (CEF Telcom) – both conducted as part of the EU multiannual financial framework 2014–2021. Other two large programmes are scheduled for launch within the next EU financial perspective (2021–2028) - they are Digital Europe and Horizon Europe. 13 31