5.3.7
Vendors
Vendors should participate in the strategy elaboration process because they design the
technical measures required to prevent, detect, deter and recover from cyber attacks.
Leaving the vendors out of the process would deprive a nation of opinions of parties that
could be a source or solution to cyber threats and vulnerabilities. Vendor roles include:
5.3.8
Providing information on how vulnerabilities affect their systems and software;
Offering insights into capacity to design, administer and maintain secure products;
Shaping national cyber threat and vulnerability diagnostics capacity;
Sharing experience on incident response activities;
Defining information sharing processes with customers on major threats; and
Building capacity to produce next generation cybersecurity solutions.
Academia
Academic institutions should play an active role in the elaboration of the strategy for the
following reasons. First, academic institutions educate the technical, management and
information assurance experts required to devise and execute cybersecurity strategies.
Second, academia hosts Computer Incident Response Teams. Third, academia leads
the research and development of secure cybersecurity solutions.
5.3.9
International Partners
As we illustrate in section 5.4, we propose that you consider asking your allies and other
international partners to contribute to your national cybersecurity strategy. Collaboration
is vital because we all rely on one cyberspace. Therefore, vulnerabilities in one country
may affect other nations with established economic and national security links. However,
there are obvious economic, political and national security concerns about collaborating
with foreign governments in this strategic domain. The concerns may not be that allies
may turn into adversaries. It may be that a country may not be sure about the adequacy
of controls in place to protect the sensitive data shared with allies. States may assuage
33
concerns by signing Memorandums of Understanding to collaborate on specific areas
such as legal measures, incident response, research and development.
5.3.10
Citizens
Last, but not least by any means, the national cybersecurity strategy must accommodate
the voice of its citizens. Cyberspace is essential to modern life. Individuals communicate,
socialise, shop, pay bills and study over the Internet. Therefore, the citizens have a stake
in a reliably functioning cyberspace that is free from fraud, child abuse material and other
risks. However, citizens may not support the national cybersecurity strategy if it prizes
security over fundamental rights such as privacy. It may not be possible to obtain input
from citizens directly. Thus, Parliament and civil society may offer the views of citizens.
33
Example - US-UK Communiqué: https://update.cabinetoffice.gov.uk/sites/default/files/resources/CyberCommunique-Final.pdf
30