5.3 ‫اٌّجبدئ اٌزىجُهُخ‬ Guiding Principles :‫ش‬٤ُ‫ حُٔزخدة حُظخ‬٠ِ‫ش ػ‬٤‫ـ‬٤‫ حالعظشحط‬ٙ‫ز‬ٛ ‫طغظ٘ذ‬ This Strategy is based on the following principles: ● ● ● ● ● ● ● ● ● ● ● Cyber security will be managed at the highest levels of Government as a top priority of National Security Threats; Government will establish the appropriate levels of national governance, co-ordination and control to ensure a collaborative approach to cyber capability development, protection, crisis response and recovery; ٠ِ‫ أػ‬٠ِ‫ ػ‬٢ٗ‫زشح‬٤‫ٓش ُألٖٓ حُغ‬ٌٞ‫ادحسس حُل‬ َ‫ ظ‬٢‫ش ِٓلّش ك‬٤٘‫ؽ‬ٝ ‫ش‬٣ُٞٝ‫ أ‬ٙ‫خص رخػظزخس‬٣ٞ‫حُٔغظ‬ .٢٘‫ؽ‬ُٞ‫خ حألٖٓ ح‬ٜٜ‫حؿ‬ٞ٣ ٢‫ذحص حُظ‬٣‫ذ‬ٜ‫حُظ‬ ● ‫خص حُٔالثٔش ٖٓ ٗٔخرؽ‬٣ٞ‫ذ حُٔغظ‬٣‫ٓش رظلذ‬ٌٞ‫خّ حُل‬٤‫ه‬ ٕ‫طشس ُؼٔخ‬٤‫حُغ‬ٝ ‫ن‬٤‫حُظ٘غ‬ٝ ‫ش‬٤٘‫ؽ‬ُٞ‫ًٔش ح‬ٞ‫حُل‬ ‫ش‬٤ٗ‫زشح‬٤‫ش حُوذسحص حُغ‬٣ٞ‫ ُظط‬٢ٗٝ‫ؾ طؼخ‬ٜٗ ‫ن‬٤‫ططز‬ ٢‫حُظؼخك‬ٝ ‫حالعظـخرش ُألصٓخص‬ٝ ‫ش‬٣‫ش حُلٔخ‬٤‫ك‬ٞ‫ط‬ٝ .‫خ‬ٜ٘ٓ ● The application of cyber security measures to organisations and systems will be prioritised by risk and impact as it is not possible or affordable to prevent all cyber incidents; Cyber security is a shared responsibility at Government, business, academia and individual levels; Government has leadership responsibility to ensure that critical infrastructure, whether public or privately owned, is protected against cyber threats; Sufficient effort will be expended on ensuring also that individuals understand what they need to do to protect themselves online; Linkage with Government policy in ICT and Postal sectors and key strategic eGovernment strategies is vital to the success of the cyber strategy A positive cyber security culture is essential for effective cyber security and developing citizens and businesses is fundamental to the success of cyber security capability; The management of digital risks and the appropriate application of cyber security will be mandated to be a Board level responsibility in all companies; Cyber security is explicitly included in all people, physical and technology decisions; Defence in depth and secure by design will be core network and infrastructure design principles. ٠ِ‫ ػ‬٢ٗ‫زشح‬٤‫ش حألٖٓ حُغ‬٤‫ن طذحر‬٤‫خص ططز‬٣ُٞٝ‫ذ أ‬٣‫طلذ‬ ‫ ٓوذحس‬٢ِٓ‫ ػخ‬٠ِ‫حألٗظٔش ر٘خء ػ‬ٝ ‫حُٔئعغخص‬ ‫ش‬٤‫ ؿ‬ٝ‫ش حٌُٖٔٔ أ‬٤‫كـْ حألػش ار ٖٓ ؿ‬ٝ ‫حُٔخخؽشس‬ .‫ش‬٤ٗ‫زشح‬٤‫حدع حُغ‬ٞ‫ ٓ٘غ ًخكش حُل‬١‫حُٔـذ‬ ● ‫ش ٓشظشًش ٌُخكش‬٤ُٝ‫ ٓغئ‬٢ٗ‫زشح‬٤‫حػظزخس حألٖٓ حُغ‬ ‫حُششًخص‬ٝ ‫ش‬٤ٔ٣‫حألًخد‬ٝ ‫ش‬٤ٌٓٞ‫حُٔئعغخص حُل‬ .‫حألكشحد‬ٝ ‫ش‬٣‫حُظـخس‬ ● ‫ش‬٤٘‫ش حُز‬٣‫ ػٔخٕ كٔخ‬٢‫ٓش ك‬ٌٞ‫ش ُِل‬٣‫خد‬٤‫ش حُو‬٤ُٝ‫حُٔغئ‬ ‫ًش‬ِٞٔٓ ٝ‫حء أًخٗض ػخٓش أ‬ٞ‫ ع‬،‫ش حُلغخعش‬٤‫حُظلظ‬ .‫ش‬٤ٗ‫زشح‬٤‫ذحص حُغ‬٣‫ذ‬ٜ‫ ٖٓ حُظ‬،‫ُِوطخع حُخخص‬ ● ‫ش‬٣‫ذ كٔخ‬٤ُ‫ْ حألكشحد ألعخ‬ٜ‫ش ُؼٔخٕ ك‬٤‫د ًخك‬ٜٞ‫رزٍ ؿ‬ .‫ حإلٗظشٗض‬٠ِ‫ْ ػ‬ٜ‫أٗلغ‬ ● ‫خعش حُؼخٓش ُوطخػخص‬٤‫حػظزخس حُشرؾ ٓغ حُغ‬ ‫ذ‬٣‫حُزش‬ٝ ‫ٓخص‬ِٞ‫خ حُٔؼ‬٤‫ؿ‬ٌُٞٞ٘‫ط‬ٝ ‫حالطظخالص‬ ‫ش‬٣‫ ؿخ‬٢‫ش أٓشح ك‬٤ٗٝ‫ٓش حإلٌُظش‬ٌٞ‫خص حُل‬٤‫ـ‬٤‫حعظشحط‬ٝ .‫ش‬٤‫ـ‬٤‫ حالعظشحط‬ٙ‫ز‬ٛ ‫ش إلٗـخف‬٤ٔٛ‫حأل‬ ● ٖ٤ٌٔ‫ط‬ٝ ‫ش‬٤‫ـخر‬٣‫ حإل‬٢ٗ‫زشح‬٤‫حػظزخس ػوخكش حألٖٓ حُغ‬ ‫ اٗـخف‬٢‫ٔخ ك‬ٜٓ ‫حُششًخص ػخٓال‬ٝ ٖ٤٘‫حؽ‬ُٞٔ‫ح‬ .٢ٗ‫زشح‬٤‫خص حألٖٓ حُغ‬٤ٗ‫آٌخ‬ ● ْ‫ن حُٔالث‬٤‫حُظطز‬ٝ ‫ش‬٤ٔ‫حػظزخس ادحسس حُٔخخؽش حُشه‬ ‫خص ٓـخُظ ادحسس‬٤ُٝ‫ ٖٓ ٓغئ‬٢ٗ‫زشح‬٤‫ُألٖٓ حُغ‬ .‫حُششًخص‬ ● ٢‫ق ك‬٣‫طش‬ٝ ‫حػق‬ٝ ٌَ‫ رش‬٢ٗ‫زشح‬٤‫ٖ حألٖٓ حُغ‬٤ٔ‫طؼ‬ ‫حُوشحسحص‬ٝ ‫غ حُوشحسحص رحص حُظِش رخألكشحد‬٤ٔ‫ؿ‬ .‫ش‬٤٘‫حُظو‬ٝ ‫ش‬٣‫ٕ حُٔخد‬ٝ‫ش رخُشئ‬٤٘‫حُٔؼ‬ ● ٍ‫ن حألٓخٕ ٖٓ خال‬٤‫طلو‬ٝ ‫ حُؼٔن‬٢‫حػظٔخد حُذكخع ك‬ ‫ْ حُشزٌخص‬٤ٔ‫ طظ‬٢‫ش ك‬٣‫ش‬ٛٞ‫ْ ًٔزخدة ؿ‬٤ٔ‫حُظظ‬ .‫ش‬٤‫ حُظلظ‬٠٘‫حُز‬ٝ ● National Cyber Security Strategy 2018-2023 5.3 Page 13 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬