Cyber Security Strategy 2021-2024 Ministry of Defence of Georgia Strategic Goals Goal 1: Human Capital Development (People) Based on the analysis of cyber incidents in the Ministry of Defence, it is clear that the human factor is one of the most vulnerable components in ensuring cyber security. On one hand Inadequately qualified and insufficient technical staff and on the other hand untrained end users are the mixed factor that significantly increases the vulnerability of critical information infrastructure. Goal 1 is a set of actions that, based on systemic approaches, ensure the development of human capital. Objective 1.1 Increasing human capacity through engagement in educational activities For effective functioning of cyber security, personnel with relevant knowledge and skills are critically important. This applies equally to computer security planners and implementers, as well as end users of computer services. Information security experts agree, that internet users are the most vulnerable in the field of cyber security. Despite the availability of the latest technological tools, a large proportion of the incidents are due to the human factor. Given the scale and complexity of the defence system, great attention is paid to the appropriate training of personnel. Therefore, to ensure adequate level of knowledge of internet users, permanent awareness raising activities are critically important, which helps to minimize cyber risks facing the system. The Ministry of Defence believes, that in the changing cyber security environment, highly qualified and knowledgeable cyber specialists are needed. Internationally qualified cyber specialists based on relevant knowledge will plan and conduct various security-oriented tasks. Objective 1.2 Strengthening technical skills of specialists in the field of cyber security by participating in various types of cyber exercises and projects Asymmetrical growth of cyber-attacks is in parallel with the rapid development of information technology. In changing cyber environment, adversary is permanently changing tactics, techniques and procedures (TTP) of cyber-attacks. Therefore, it is important that cyber specialists regularly participate in a variety of activities, which aim to develop practical cyber skills, as well as to introduce current best practices in the operating environment. 8