obligation. As of the development phase of this document, about fifteen nations and the EU have a second-generation cybersecurity strategy, Estonia among them.5 With the third cybersecurity strategy, we are among the first countries in the world. Today, cybersecurity is universally accepted as an integral part of the functioning of the state, the economy, internal and external security. The accelerating, diversifying and largely unpredictable digitalisation poses major challenges to risk identification and management. Next to these, the Estonian society today is not sufficiently well prepared for coping with existing cyber threats – the private and public sector alike are largely unaware of the risks and needs, in particular at the leadership level. Digital technologies now have such an intertwined role in Estonian society that it is not possible to address all risks through a single planning document. The principles of cybersecurity are already partially integrated into sectoral planning processes. However, the maintenance and development of a sustainable digital environment also requires cross-sectoral focused cooperation. This can only be ensured by means of a strong and coherent sectoral strategy. In addition, the cybersecurity strategy plays the role of a communication tool for raising awareness in political decision-making processes, enhancing public-private partnership, and shaping Estonia’s international engagement. The Cybersecurity Strategy was prepared in a coherent process with Estonia’s Digital Agenda 2020. Our experience has brought an understanding that in a successful digital society, developing information society and ensuring cybersecurity must be a strategic whole. The role of cybersecurity in the information society is to ensure conditions for efficient and secure use of opportunities offered by ICTs. The objectives and key indicators of the cybersecurity strategy are planned in a four-year perspective, with an interim review planned at the end of the current Digital Agenda in 2020. The relevant terms and definitions are summarised in Appendix 1. 5 https://ccdcoe.org/cyber-security-strategy-documents.html 8