The development of a national concept for cyber security should now be directed through two newly formed important factors, from the adoption and implementation of the first national cyber security strategy - accession to the NATO alliance and the opening of the negotiation Chapter 10 - Information Society. In July 2016, the European Union adopted the Network Information Security Directive of European Parliament and of the Council 2016/1148. The goal of this Directive is a comprehensive regulation of national cyber security of the Member States. It consists of five chapters and, in order to fulfil the obligations, the Member States, shall: • adopt a national cyber security strategy; • define the relevant authorities in the field of cyber security; • have at least one Computer Emergency Response Team (CERT). These teams have to cover relevant sectors and services. These teams must also have adequate resources and tools in order to fulfil their complex functions and tasks; • regulate the security of the information systems of the owners of essential, critical services in the technical and organisational manner stipulated by the Directive; • regulate the security of the information systems of the owners of digital services in the technical and organisational manner stipulated by the Directive; • voluntarily use the recommended EU standards. The extent of the differences between the EU member states regarding the protection of network and information security can be concluded from the directive itself: „Existing capabilities are not sufficient to ensure a high level of security of network and information systems within the Union. Member States have very different levels of preparedness, which has led to fragmented approaches across the Union. This results in an unequal level of protection of consumers and businesses, and undermines the overall level of security of network and information systems within the Union.“ „National strategy on the security of network and information systems’ means a framework providing strategic objectives and priorities on the security of network and information systems at national level.“ Pursuant to Article 7 of the NIS Directive, each Member State shall adopt a national strategy on the security of network and information systems by 9 May 2018, which may be considered as equivalent to the National Cyber Security Stra- 23