N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V · I N T R O D U C T I O N : M A I N T R E N D S A N D T H R E AT S · ing on social networks, were unimaginable a few years ago: they have now become commonplace in the contemporary landscape of threats. The world in 2021 is facing a multitude of international crises, ranging from the health crisis due to the COVID-19 pandemic, to the climate crisis, but also a deep crisis related to the social contract and political confidence in many countries. All these crises have complex but undeniable relationships with information and communication technologies and systems: society’s dependence on the Internet and connectivity is growing. At the same time, the attack surface is becoming more diverse with the introduction of new technologies, while geopolitical rivalries are impacting the security of the digital space. Malicious acts are undertaken by a multitude of state and non-state actors against diverse targets: government administrations, businesses and citizens are victims of such acts. The development of a new national cybersecurity strategy is a prime opportunity to review the state’s posture on information security awareness. In a spirit of openness and collaboration, the new strategy has been submitted for consultation to stakeholders at the national level: relevant ministries and administrations, private companies, professional information security researchers and civil society organisations. While technological progress harbours risks, it also bears opportunities to be seized. The use of blockchain technology for many different applications makes it possible to develop trust solutions in political contexts where trust can be a scarce commodity. This Cybersecurity Strategy outlines how an integrated and comprehensive information security approach enables the government, private enterprises and citizens to fully seize the opportunities offered by the digital revolution. Improvements in the performance of cyber intrusion warning and response systems offered by, among other things, advanced algorithmic applications make life more difficult for advanced persistent threat groups; measures for mitigating denial of service attacks help thwart or cushion the disruptive effect on networks, applications, or other digital services. With the massive introduction of fifth generation (5G) mobile data transmission, which promises to revolutionise connectivity worldwide, both for industrial and mission-critical applications and users/citizens, society will benefit from unprecedented speed of access to information and data availability, through a sharp increase in data rates, increased responsiveness thanks to a sharp reduction in latency and a significant improvement in connectivity capabilities. The transition to increasingly mobile technologies – the widespread use of smartphones and other portable, ever more affordable technologies is just one example – and the ever-increasing reliance on cloud computing solutions, as well as the continued development of the Internet of Things mean that human societies are increasingly connected but at the same time increasingly dependent on the availability and reliability of their data. Advances in quantum computing research suggest that the race between encryption and decryption technologies will continue. Luxembourg will engage more proactively in positive cooperation initiatives at global level, such as in the United Nations Secretary-General’s Digital Cooperation Action Plan. At European level, the EU’s digital hub is in a process of consolidation in the Grand Duchy of Luxembourg. The national cybersecurity ecosystem is booming. This strategy is part of a continuous process of improving coordination and procedures in the field of information security and builds on the lessons learned from the three previous national strategies. This underlines the collective responsibility of political actors, ICT experts and industry, as well as citizens of all ages to become more independent and to use technology wisely, and even to demand trusted services and tools that meet their needs. The dissemination of disinformation, hate speech or conspiracy theories undermines citizens’ trust in their governments and often threatens social peace. Influencing operations – for political destabilisation purposes as well as for the purpose of increasing private income – such as micro-target- 6