NATIONAL CYBER SECURITY STRATEGY: AN IMPORTANT MILESTONE IN 2020 In November 2020, the Government of the Czech Republic approved the National Cyber Security Strategy for the following 5 years, which was prepared by the NÚKIB. The document describes the main principles of cyber security in the Czech Republic, defines its strategic direction in cyber security, and describes the fundamen­ tal visions in this increasingly important area. The document is divided into three main pillars, each to be fulfilled through strategic goals. 1. 2. 3. 12 IN CYBERSPACE WITH CONFIDENCE: Since the risk to the Czech Republic from cyberspace has been increasing over recent years, the Czech Republic must react to a whole range of new challenges. The Czech Republic should strengthen its prosperity through a confident and responsible approach to cyber security at national level. It will thus also remain a strong ally for its partners at international level. STRONG AND RELIABLE ALLIANCES: The flag­ ship vision for the Czech Republic as a modern European country is an active role in creat­ ing international dialogue, and in the EuroAtlantic area in particular. The Czech Republic will proceed from coherent national positions and clearly defined strategic interests. On this basis, it will continue to create and deepen strong alliances with its partners in cyber secu­ rity and defence. RESILIENT SOCIETY 4.0: The Czech Republic is among European leaders in spreading and using modern technologies. As a result, Czech society is successfully transforming into an in­ formation society. This trend, however, is bring­ ing with it not only an increase in the number of end-users in Czech society but also threats to which those users are exposed. The problems associated with this include insufficient digital hygiene, insufficient media literacy, and critical thinking across society. Therefore, the Czech Republic must concentrate on successfully transforming Czech society into the so-called Society 4.0. This is the state where the entire society is able to fully exploit the benefits of modern technologies and, at the same time, in­ tegrate them into their everyday lives in such a way that the security risks are minimized. Cyber security must thus become an integral part of the everyday lives of citizens. The National Cyber Security Strategy of the Czech Republic is detailed in specific tasks within the Action Plan. Both documents were prepared in cooperation with the relevant entities responsible for the essential areas of cyber security for the accomplishment of the individual tasks. The NÚKIB will continually monitor, discuss, assess and coordinate the fulfilment of the individual goals. The National Cyber Security Strategy is available on the NÚKIB’s website: https://www.nukib.cz/cs/ kyberneticka-bezpecnost/strategie-akcni-plan/ The NÚKIB Development Concept was also approved in 2020. It describes the complete range of activities that the NÚKIB currently ensures, evaluates the current situation, and describes and justifies the need for the future development of the agency within the context of the security environment, particularly as regards cyber threats. The complete document on the NÚKIB Development Concept is available on the website at www.nukib.cz/cs/kyberneticka-bezpecnost/ strategie-akcni-plan LEGISLATIVE FRAMEWORK: SETTING BASIC RULES FOR IMPORTANT ENTITIES12 amendment of the decree on important information systems During the last year, the NÚKIB worked on an amend­ ment to the Decree on Important Information Systems, the aim of which was to simplify and clarify the process of identification of such systems and reinforce the legal certainty of its addressees through its increased effectivity. The amendment entered into force in Sep­tember 2020 and gradually came into effect from 1 January 2021. Due to the costs which will be required to secure the newly identified systems, the effectiveness of the list of systems was spread over three years. Pursuant to Act No 181/2014, on cyber security and on amendments to related laws, as amended, it includes entities whose information systems are important for the functioning of the State. Measures 27