Finally, the Czech Republic will reinforce digital hygiene principles, critical thinking, and media literacy in society. This will allow the country and its people to achieve higher resiliency to malicious manipulation inside and outside cyberspace. 1.4 Confident Reactions The cyber security policy is an integrated part of the Czech Republic’s overall security policy. The country will thus employ a proactive and decisive approach based on the timely detection of cyber threats, their expert analysis, and the immediate implementation of adequate countermeasures. The Czech approach to cyberspace primarily reflects a policy of actively preventing conflicts and the application of preventive diplomacy. In the event of a crisis or conflict stemming from aggressive or malicious cyberspace activities, the country is prepared to act immediately, forcefully, and to use all diplomatic, political, and – in extreme cases – military resources or sanctions against the aggressor. One of the security pillars is NATO’s principle of collective defence that counts on utilizing the national capacities and abilities of NATO partners, including in cyberspace. Membership in the EU and other international organizations, as well as bilateral cooperation, also contribute towards security. In light of the unique nature of the cyber threats to which the state has to immediately react, it is necessary to take responsibility for security and focus on the ability to independently and quickly respond. This will allow the Czech Republic to better defend itself from malicious aggressors and act as a more reliable partner in international relations. Through its continual efforts to achieve the highest possible level of security, and its visible, confident reactions to cyberattacks, the Czech Republic will strengthen its overall resilience in cyberspace using the deterrence concept that is part of the current cyber security and defence system. In this respect, attribution is a Attribution significant challenge. Determining the The process of ascribing, or attributing, a source and identity of an attacker is a malicious cyber activity to a specific state or basic prerequisite for any effective non-state actor. Attribution ideally takes into reaction. There are, however, a series of account technical, non-technical, and multisource information. The information is then specific obstacles in cyberspace that discussed and approved at the political level, make attribution difficult. The Czech which also decides on the action to be taken Republic aims to minimize all the based on the attribution. advantages cyberspace offers attackers. To this end, the country will focus on strengthening efforts and capacities in the national cooperation system, specifically in detection, timely reaction, and the establishment of a national attribution system for cyberattacks and other malicious activities in cyberspace. The majority of resources will therefore be invested in analysis and the coordination of results. This is the only way the Czech Republic can act confidently in cyberspace, and actively cooperate on attribution with its partners – both bilaterally and in international organizations. 13