LUXEMBOURG CYBER DEFENCE STRATEGY 1 INTRODUCTION The Luxembourg Defence Guidelines for 2025 and beyond highlight that threats to Luxembourg’s vital interests do not stop at the physical border. Cyberspace is vital for Luxembourg’s security and essential for the proper functioning and resilience of the country’s dynamic and knowledge-based services economy that is open to the world. Resilience encompasses the full range of measures needed to ensure that institutions and public services continue to function in all circumstances and that populations and critical infrastructure are safeguarded. This broad concept of resilience naturally extends towards the cyberspace domain. Luxembourg Defence is responsible for ensuring EU and NATO-defined cyber defence commitments and policies are upheld. On a national level, the Directorate of Defence is part of the Interministerial Coordination Committee for Cyber Prevention and Cybersecurity and thereby contributes to the National Cybersecurity Strategy as well as jointly ensuring that subsequent initiatives are coherent and coordinated. This inaugural Cyber Defence Strategy will allow Luxembourg Defence to mature its capabilities, to contribute further to national cybersecurity initiatives and to strengthen resilience of national infrastructure. The Defence Guidelines outline the continued development of cyber defence expertise and capabilities in order to enhance cybersecurity of Luxembourg Defence and security of military personnel, particularly on deployments. A national strategy for cyber defence will underpin the “defence” component of the current and forthcoming national cybersecurity strategies. The longterm objective of this strategy is for Luxembourg to have one of NATO and EU’s most cyber secure Defences, and to develop expertise and capabilities which can be offered to Allies and partners. The strategy focuses on four strategic goals which will be reviewed periodically in order to convey sufficient flexibility and adaptability in a fast-changing environment. Cyber defence is not a new concept, with NATO having already released its first Cyber Defence Policy in 2008 and the EU’s publication of their inaugural Cyber Defence Policy Framework in 2014. Neither is cyber defence new to Luxembourg where steps have already been taken to secure Luxembourg’s assets. To continue asserting Luxembourg’s interests, to have its voice heard and to enjoy the collective security assured in particular by NATO, this strategy incorporates Luxembourg’s commitments towards international organisations, ensuring that Luxembourg bears its share of responsibility in efforts and risks inherent in collective and common defence, and be recognised as a partner making relevant contributions. 7