Cyber Security Strategy 2021-2024 Ministry of Defence of Georgia Current situation The urgency of creating the document is due to the development of information and communication technologies and the growing dynamics of cyber-attacks. As a result of the ongoing institutional changes in the MoD, activities are being automated, digitized and unified. Centralized management systems are being introduced. This process ensures the development of effective management and communication models, but on the other hand, significantly increases the likelihood of cyber-attacks and the risks of information system compromise. Based on the understanding of the situational analysis in the Ministry and the best practices in the field of cyber/information security (ISO, NIST, CIS, etc.), the need for changes and improvement of existing approaches has been identified, which should ensure the development of effective and efficient models of process planning, management and monitoring. Improperly protected cyberspace poses significant challenges and serious risks to the defence system. Unauthorized access to information systems by cyber-attackers can cause leakage of confidential information and various types of intelligence-sabotage actions can be carried out, which ultimately aim to reduce Georgia's defence capabilities and represent the country as an inappropriate partner to the international community. What do we want to achieve by 2024? - People, Process, Technology People conduct different activities with its own intellectual resources. processes make these activities more efficient and technology allows processes to be automated and optimized. In the context of this provision, the transformation from a narrow technical direction of cyber security to a strategic level system, requires a complex approach. The document discusses cyber security and the accompanying strategic goals in the context of the above interrelated directions. The goals and action plan activities formulated within the framework of the cyber security strategy, serve to increase cyber capabilities in the three areas mentioned. 4