CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 1. Introduction Our society and economy are constantly changing. This process is accelerated by digital transformation. People, organizations, devices, data and processes increasingly connect and interact through online channels such as the internet, mobile devices, Internet of Things (IoT), or the cloud for storing (personal) files and photos. This growth in the use of new technologies has been accompanied by an increase in cyberattacks, as well as an increase in the severity and impact rate of these attacks. Sensitive data, including personal data, customer data and politically sensitive data (e.g. military intelligence), is increasingly at risk of disclosure. Therefore, it is of utmost importance to protect this data by securing the digital environment. 1.1 Policy Context In 2012, Belgium signed off on its first Cybersecurity Strategy, which focused on recognizing cyber threats, improving security, and establishing measures to respond appropriately to incidents. With the continuous change in the cyber landscape, a new Belgian cybersecurity strategy that responds to current and future risks and threats is needed. The Cybersecurity Strategy 2.0 shapes Belgian policy and aims to secure the cyber landscape at all levels, for all stakeholders. Monitoring, coordinating and overseeing the implementation of the Belgian Cybersecurity Strategy is the responsibility of the Centre for Cybersecurity Belgium (CCB). The Cybersecurity Strategy 2.0 sets goals for 2025 and will be periodically reviewed and adjusted where necessary. This Strategy is also framed in an international context. For example, the European Union is working on a number of initiatives to promote and improve cyber resilience within the EU. In July 2016, the Security of Network and Information Systems (NIS) Directive was adopted, which was transposed into Belgium law on 7 April 2019: Act establishing a framework for the security of network and information systems of public interest for public safety. Article 7 of this directive (reproduced in article 10 of the Belgian NIS Act) requires member states to draw up a national strategy for the security of network and information systems. In addition, in June 2019, the Cybersecurity Act came into force, which, among other things, expands ENISA’s mandate to make it the European 7