2 Level of skills and management commitment Cyber and information security must be embedded in top management, and skills must be strengthened. This applies in relation to an overview of assets, vulnerabilities and knowledge of potential threats. Citizens, businesses and governments need to know how to protect themselves and stay safe digitally, and more specialists with cyber and information security skills need to be trained.