1.5 HOW TO READ THIS GUIDE This Guide aims to assist States as they build capacity to identify goals, constraints and stakeholders of a national cybersecurity strategy. We structure the document as follows: 1.5.1 Section I: Executive Summary The Executive Summary presents the main proposals we make in the Guide. 1.5.2 Section II: Global Cybersecurity Context In this section, we explore the value of cyberspace to global and national economic wellbeing and security. First, we contrast the terms cybersecurity and information security. We then consider the growing sophistication, frequency and gravity of cyber attacks. Thereafter, we discuss the cybersecurity concepts and themes that we use frequently in the Guide. Lastly, we explore the global nature of cybersecurity and the activities of the international community at the United Nations. We conclude with an evaluation of the ITU’s role in cybersecurity as encapsulated in the Global Cybersecurity Agenda (GCA). 1.5.3 Section III: National Cybersecurity Context The concepts of critical national infrastructure and critical information infrastructure allow us to explore the transformation of cybersecurity from a pure technical domain into a strategic national policy area. We then discuss the value of a national cybersecurity strategy. We follow on with reflection on the steps in the strategy formulation process. This section covers the conditions that influence national cybersecurity formulation and execution. We note typical stakeholders and their role in national cybersecurity strategy. 1.5.4 Section IV: National Cybersecurity Strategy Model In this section, we present a model for visualising the national cybersecurity domain. The model could also support organisational and global cybersecurity programmes. We use the Pillars of the GCA and the Ends-Ways-Means strategy paradigm as the foundations for our dynamic view that grounds cybersecurity strategy in national values and interests. 1.5.5 Section V: Ends – Cybersecurity Objectives Ends are the cybersecurity objectives that national administrations seek to accomplish. Cybersecurity ends cover economic, social and national security matters. This aligns with national interests as cybersecurity aims to keep States secure and prosperous. 7

Select target paragraph3