Table of Contents
1
EXECUTIVE SUMMARY ................................................................................................................. 5
1.1
1.2
1.3
1.4
1.5
2
OVERVIEW .............................................................................................................................. 5
SCOPE OF GUIDE ................................................................................................................... 5
AUDIENCE ............................................................................................................................... 5
CYBERSECURITY PROGRAMME ELEMENTS ...................................................................... 6
HOW TO READ THIS GUIDE ................................................................................................... 7
GLOBAL CONTEXT OF CYBERSECURITY................................................................................ 13
2.1
2.2
2.3
2.4
3
CYBERSECURITY AND INFORMATION SECURITY ........................................................... 13
THE AGE OF CYBER ATTACKS ............................................................................................ 13
CYBERSECURITY: A GLOBAL CHALLENGE ....................................................................... 14
CYBERSECURITY CONCEPTS ............................................................................................ 15
UN CYBERSECURITY ACTIVITIES ............................................................................................. 17
3.1
4
RESOLUTIONS ON CYBERSECURITY ................................................................................ 17
ITU CYBERSECURITY ACTIVITIES ............................................................................................ 18
4.1
4.2
4.3
4.4
4.5
5
WORLD SUMMIT ON THE INFORMATION SOCIETY (WSIS) .............................................. 19
WSIS ACTION LINE C5 .......................................................................................................... 19
GLOBAL CYBERSECURITY AGENDA (GCA) ....................................................................... 19
THE CHILD ONLINE PROTECTION (COP) INITIATIVE ........................................................ 21
GCA PARTNERSHIPS ........................................................................................................... 22
NATIONAL CYBERSECURITY CONTEXT .................................................................................. 25
5.1
5.2
5.3
5.4
6
CRITICAL INFRASTRUCTURE ............................................................................................. 25
PURPOSE OF A CYBERSECURITY STRATEGY ................................................................. 26
WHO: CYBERSECURITY STAKEHOLDERS ........................................................................ 27
HOW: STRATEGY ELABORATION PROCESS ..................................................................... 31
CYBERSECURITY STRATEGY MODEL ..................................................................................... 35
6.1
6.2
6.3
7
INTRODUCTION .................................................................................................................... 36
NATIONAL STRATEGIC CONTEXT ...................................................................................... 37
NATIONAL INTERESTS, THREATS & RISKS ....................................................................... 39
CYBERSECURITY ENDS ............................................................................................................. 42
7.2
7.3
7.4
7.5
7.6
NATIONAL SECURITY ........................................................................................................... 42
ECONOMIC WELL-BEING ..................................................................................................... 43
PROMOTION OF VALUES ..................................................................................................... 44
FAVOURABLE WORLD ORDER ........................................................................................... 44
GOVERNANCE ...................................................................................................................... 45
8
WAYS – PRIORITIES .................................................................................................................... 48
9
PRIORITY 1 – LEGAL MEASURES ............................................................................................. 48
9.1
10
10.1
10.2
11
11.1
11.2
LEGAL MEASURES STRATEGY ........................................................................................... 48
PRIORITY 2 – TECHNICAL AND PROCEDURAL MEASURES.............................................. 51
PROCEDURAL MEASURES .............................................................................................. 51
TECHNICAL MEASURES ................................................................................................... 55
PRIORITY 3 – ORGANISATIONAL STRUCTURES................................................................. 60
GOVERNMENTAL ORGANISATIONAL STRUCTURES ................................................... 60
NATIONAL CYBERSECURITY FOCAL POINT .................................................................. 62
9