9 Section 1 EXECUTIVE SUMMARY 1.1. The future of the UK’s security and prosperity rests on digital foundations. The challenge of our generation is to build a flourishing digital society that is both resilient to cyber threats, and equipped with the knowledge and capabilities required to maximise opportunities and manage risks. 1.2. We are critically dependent on the Internet. However, it is inherently insecure and there will always be attempts to exploit weaknesses to launch cyber attacks. This threat cannot be eliminated completely, but the risk can be greatly reduced to a level that allows society to continue to prosper, and benefit from the huge opportunities that digital technology brings. 1.3. The 2011 National Cyber Security Strategy, underpinned by the British Government’s £860m National Cyber Security Programme, has delivered substantial improvements to UK cyber security. It achieved important outcomes by looking to the market to drive secure cyber behaviours. But this approach has not achieved the scale and pace of change required to stay ahead of the fast moving threat. We now need to go further. 1.4. Our vision for 2021 is that the UK is secure and resilient to cyber threats, prosperous and confident in the digital world. 1.5. To realise this vision we will work to achieve the following objectives: • DEFEND We have the means to defend the UK against evolving cyber threats, to respond effectively to incidents, to ensure UK networks, data and systems are protected and resilient. Citizens, businesses and the public sector have the knowledge and ability to defend themselves. • DETER The UK will be a hard target for all forms of aggression in cyberspace. We detect, understand, investigate and disrupt hostile action taken against us, pursuing and prosecuting offenders. We have the means to take offensive action in cyberspace, should we choose to do so. • DEVELOP We have an innovative, growing cyber security industry, underpinned by worldleading scientific research and development. We have a self-sustaining pipeline of talent providing the skills to meet our national needs across the public and private sectors. Our cutting-edge analysis and expertise will enable the UK to meet and overcome future threats and challenges. 1.6. Underpinning these objectives, we will pursue INTERNATIONAL ACTION and exert our influence by investing in partnerships that shape the global evolution of cyberspace in a manner that advances our wider economic and security interests. We will deepen existing links with our closest international partners, recognising that this enhances our collective security. We will also develop relationships with new partners to build their levels of cyber security and protect UK interests overseas. We will do this both bilaterally and multilaterally, including through the EU, NATO and the UN. We will deliver clear messages about consequences to adversaries who threaten to harm our interests, or those of our allies, in cyberspace. 1.7. To achieve these outcomes over the next five years, the UK Government intends to intervene more actively and use increased investment, while continuing National Cyber Security Strategy 2016