Strategic principles An effective approach to cybersecurity also takes the dynamics that are specific to the digital domain into account. This requires strategic principles for determining ambitions and measures. CYBERSECURITY IS AN INTEGRAL PART OF NATIONAL SECURITY Cybersecurity is inextricably linked to national security and the smooth functioning of society. As a result of digitalisation, society has become vulnerable to disruptions from digital attacks. Because of the connectivity of the digital society, simple digital attacks can quickly disrupt digital processes. A basic level of cybersecurity is needed to increase resilience against these kind of attacks. Citizens, businesses and public authorities must endeavour to improve their digital security and the government must also be able to fulfil its protective duty in the digital domain. Capabilities and resources to address threats should be in order. Finally, national security and cybersecurity should be a basic consideration in the further development of the government’s digital processes. This means that the government will develop cybersecurity requirements for procuring its own ICT resources. These requirements will also include economic security considerations to improve resilience against state actors. PUBLIC-PRIVATE COOPERATION IS THE BASIS Security in the digital domain can only be shaped in cooperation with, and to a significant extent by, the business community. Public-private cooperation therefore forms the basis for the Dutch approach to cybersecurity. Current practice in this cooperation shows that there is a need for a clear division of responsibilities in the digital domain. Those responsibilities will, in part, be based on existing laws and regulations on security, assurances of supply and market organisation. However, new issues will also arise where the responsibilities between public authorities, the business community and citizens will have to be established (or re-established). This is why this Agenda favours an integrated approach to cybersecurity, which requires joint efforts from the business community, social organisations and the various government bodies. GOVERNMENT REPRESENTS PUBLIC INTERESTS, STIMULATES ACCEPTANCE OF OWN RESPONSIBILITIES AND SETS A GOOD EXAMPLE A key task of the government is to take the lead in the commitment to a secure and stable Netherlands by recognizing threats to vital interests and increasing the resilience of those interests. This means that the government ensures an appropriate approach to and preparations for crises and incidents that threaten social continuity, even though 100% security is not possible in the digital domain either. Approximately 80% of the critical infrastructure is in private hands. The government therefore encourages the business community and citizens to shape their own responsibilities in the best possible way. Where necessary, stimuli will be provided or frameworks will be set up to create the preconditions for secure behaviour in the digital domain. The open nature of the internet can lead to widespread vulnerabilities. Where the misuse of products, services or processes puts the continuity of society at risk, the government sets special requirements for producers, purchasers, consumers and service providers. Finally, the government, as a public body, is obliged to have the cybersecurity of its own processes in order and thereby, as a launching customer, also sets a good example. KNOWLEDGE DEVELOPMENT AND INFORMATION SHARING ARE CRUCIAL Knowledge is crucial to cybersecurity: sharing the available knowledge and promoting information sharing by the public and private sector is needed to strengthen cybersecurity and resilience across the board. In addition, it is necessary to (continue to) stimulate both fundamental and applied research into cybersecurity, to develop the Dutch cybersecurity knowledge position. Having our own high-quality scientific knowledge and applications will contribute to the digital autonomy of the Netherlands and/or Europe. MAINSTREAMING OF CYBERSECURITY IS A PRECONDITION Digitalisation permeates through to all facets of society. Cybersecurity forms the basis for successful entrepreneurship, administration and participation in A cyber secure Netherlands National Cyber Security Agenda | 13