THE CYBER SECURITY SYSTEM IN THE CZECH REPUBLIC The structure of the cyber security system in the Czech Republic is complex. A significant number of bodies participate, each having its own role and contributing to cyber security in different ways depending on their powers and activities. As the supreme embodiment of executive power, the government of the Czech Republic is responsible for ensuring national security and for the administration and operation of the entire Czech security system. The National Cyber and Information Act No 181/2014, on cyber security and Security Agency (hereinafter “NÚKIB”) is the changes to related laws (the Cyber cyber security administrator and the central Security Act), as amended, is the first comprehensive Czech law ever administrative body for cyber security, covering cyber security. It primarily including the protection of classified establishes obligations to ensure the information in information and security of cyber and informational infrastructure for selected public and communication systems as well as private entities and individuals cryptographic protection. Its powers are (mandated bodies and individuals). It determined by Act No 181/2014, on cyber also establishes NÚKIB’s authority in coordinating and overseeing the security (hereinafter the “Cyber Security Act”), provision of cyber security in the Czech and legislation on the protection of classified Republic. information and security qualifications. It is also responsible for non-public services in relation to the Galileo satellite system. Of its broad range of activities, the central one is to ensure cyber security by protecting critical information infrastructure and other important communication systems and networks. The government CERT (hereinafter “GovCERT.CZ”) was created to this end by the Czech government, while other NÚKIB parts provide mandated entities with various services. NÚKIB oversees international cyber security cooperation while also serving as the national contact point for coordinating research, while significantly contributing to cyber security education efforts. The national CERT works in close cooperation with GovCERT.CZ, and its powers are determined by the Cyber Security Act and a public contract signed with NÚKIB. The national CERT – under the name CSIRT.CZ – has been operated by the CZ.NIC association since 2011. Foreign policy and relations between the Czech Republic and other states and international organizations are coordinated by the Ministry of Foreign Affairs of the Czech Republic (hereinafter the “Ministry of Foreign Affairs”), which cooperates with NÚKIB and other state bodies in cyber security. Intelligence services also contribute to the cyber security system. The Security Information Service is active in cyber security, as is Military Intelligence, and the Office for Foreign Relations and Information, which procure, process, and analyse information important for cyber security and hence national security in the Czech Republic. 7