CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND CYBERSECURITY STRATEGY OF THE REPUBLIC OF POLAND The research and development activities shall be carried out also in the area of international cooperation within the EU and the NATO. Important tasks for ensuring cybersecurity are performed by non-governmental organisations, which are very efficient organisers of educational activities for the society and providers of analyses and opinions for the public administration. It is also possible to acquire experts with unique skills through analytical centres for the purposes of solving complex cybersecurity issues. 7.4 Gaining the capacity to perform a full spectrum of military operations in cyberspace 8. Specific objective 4 – Building public awareness and competences in the area of cybersecurity The Armed Forces of the Republic of Poland, as the fundamental element of the state defence system, should be involved in activities in cyberspace at the same level as in the air, on the ground and at sea, in peacetime, during war and in crisis situations alike. Therefore, the ability to conduct a full spectrum of military operations in cyberspace must include the identification of threats, the protection and defence of ICT systems, and combating cyber threats. Activities in cyberspace represent an integral part of planned operations to be conducted by the Armed Forces of the Republic of Poland both on their own and in co-operation within alliances and coalitions. The structure of the Armed Force of the Republic of Poland will be improved by establishing and strengthening of formations tasked with conducting tasks in cyberspace, which have capabilities to identify, prevent and combat cyber threats. Readiness to military and non-military interoperability in cyberspace at the national and international level within alliances, coalitions and accords will be developed. Qualifications of the personnel conducting military operations in cyberspace will be constantly improved by means of training courses. At the same time, threats will be identified on an on-going basis and the situation will be assessed – also in terms of compliance with international law – which will provide for selecting appropriate methods and tools to protect and defend own resources and eliminate sources of threats to ICT networks and systems, both stationary and mobile. Bearing in mind the rapid pace of development of technologies that make up the cyberspace environment, the Ministry of National Defence will strive to develop or acquire an innovative methods and tools to ensure operational effectiveness in this domain. 24 8.1 Increasing competence of the staff of entities relevant to ensuring cybersecurity of the Republic of Poland C ompetences of the staff of entities relevant to ensuring cybersecurity of the Republic of Poland shall be increased through establishing and introducing of such a model of the academic education and professional development which will ensure appropriate qualifications of employees. To this end, model academic programmes shall be developed for a dedicated field of cybersecurity. Within the framework of the broadly understood expert education, in order to more effectively counteract growing cybercrime, the system of training for all employees of entities relevant to ensuring cybersecurity and for representatives of law enforcement agencies and the judiciary shall be enhanced by putting in place a dedicated educational programme including both theoretical and practical trainings based on real examples of threats. In order to retain highly qualified employees in public administration, alongside the use of other instruments supporting their activity, actions shall be taken to bring their salaries closer to the level they could obtain when working in the private sector. At the same time, the government shall develop and implement a systemic support for increasing competences of employees of the local government administration units in the area of cybersecurity. The managerial staff of local government administration units shall dynamically define responsibilities and authorisations of persons who play important roles in cybersecurity management and appropriately communicate these decisions to all stakeholders. 25