3 Progress in Delivering the 2012 Strategy The National Information Assurance and Cyber Security Strategy (NIACSS) sought to achieve comprehensive information security and the successful implementation of this strategy required collaboration among all involved parties: Government, Defence and Security, the private sector and international partners. It was understood that the efforts of involved parties should complement rather than conflict with each other and that strategies and policies developed by the private sector should augment, comply, and be consistent with this strategy. The NIACSS recognised that the greater uptake of internet-based technologies offered increasing opportunities for economic and social development. These developments were seen as offering significant advantages to connected societies. It has become obvious over the period of the NIACSS that as the global reliance on networks and emerging technologies and applications has grown, so have the opportunities for those who would seek to compromise systems and data. Equally, the geopolitical landscape has changed. Malicious cyber activity knows no international boundaries. State actors are experimenting with offensive cyber capabilities. Cyber criminals are broadening their efforts and expanding their strategic modus operandi to achieve higher value pay-outs from individuals, organisations and institutions. Terrorists, and their sympathisers, are conducting low-level attacks and aspire to carry out more significant acts. 3.1 َ‫اٌزمذَ اٌّذشص فٍ رذمُك أهذاف اعزشارُجُخ ػب‬ 2012 ‫ٓخص‬ِٞ‫ش ُؼٔخٕ أٖٓ حُٔؼ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫عؼض حالعظشحط‬ َٓ‫ن أٖٓ شخ‬٤‫ طلو‬٠ُ‫) ا‬2102( ٢ٗ‫زشح‬٤‫حألٖٓ حُغ‬ٝ ٖ٤‫ٕ ر‬ٝ‫ش حُظؼخ‬٤‫ـ‬٤‫ز حالعظشحط‬٤‫هذ ططِذ ط٘ل‬ٝ ،‫ٓخص‬ِٞ‫ُِٔؼ‬ ‫خص‬ٜ‫حُـ‬ٝ ‫ٓش‬ٌٞ‫ رُي حُل‬٢‫ش رٔخ ك‬٤٘‫خص حُٔؼ‬ٜ‫ًخكش حُـ‬ ‫هذ أدسًض‬ٝ ،ٖ٤٤ُٝ‫حُششًخء حُذ‬ٝ ‫حُوطخع حُخخص‬ٝ ‫ش‬٤٘ٓ‫حأل‬ ‫خص‬ٜ‫د حُـ‬ٜٞ‫ طٌخَٓ ؿ‬ٞٛ ‫د‬ِٞ‫خص إٔ حُٔط‬ٜ‫ حُـ‬ٙ‫ز‬ٛ ًَ ‫خعخص‬٤‫ؿذ إٔ طؼضص حُغ‬ٞ‫ظ‬٣ ٚٗ‫أ‬ٝ ،‫خ‬ٜ‫سس ال طؼخسر‬ًٞ‫حُٔز‬ ‫خ حُوطخع حُخخص‬ٛ‫ؼظٔذ‬٣ ٢‫خص حُظ‬٤‫ـ‬٤‫حالعظشحط‬ٝ .‫خ‬ٜ‫طظ٘خعن ٓؼ‬ٝ ‫حكن‬ٞ‫إٔ طظ‬ٝ ‫سس‬ًٞ‫ش حُٔز‬٤‫ـ‬٤‫حالعظشحط‬ ‫خد‬٣‫ إٔ حصد‬٠ِ‫سس ػ‬ًٞ‫ش حُٔز‬٤‫ـ‬٤‫ كوذ أًذص حالعظشحط‬ٚ٤ِ‫ػ‬ٝ ‫ حعظخذحّ حإلٗظشٗض‬٠ِ‫ش ػ‬٤٘‫خ حُٔز‬٤‫ؿ‬ٌُٞٞ٘‫ حُظ‬٠ِ‫حإلهزخٍ ػ‬ ٕ‫ٖٓ شؤ‬ٝ ،١‫حالهظظخد‬ٝ ٢‫س حالؿظٔخػ‬ٞ‫ؼضص كشص حُظط‬٣ ‫خٓش ُِٔـظٔؼخص‬ٛ ‫خ‬٣‫ش ٓضح‬٤‫ك‬ٞ‫ ط‬٢‫ْ ك‬ٛ‫غخ‬٣ ٕ‫س أ‬ٞ‫رُي حُظط‬ .‫خ‬ٜ‫حُٔظظِش ر‬ ‫ش‬٤‫ـ‬٤‫خ حالعظشحط‬ٜ‫ ؿطظ‬٢‫ حُلظشس حُظ‬ٟ‫ ٓذ‬٠ِ‫ًٔخ هذ حطؼق ػ‬ ‫ حُشزٌخص‬٠ِ‫ٍ ػ‬ٝ‫س حػظٔخد حُذ‬ٞ‫سس رؤٕ طط‬ًٞ‫حُٔز‬ ٢‫خدس ك‬٣‫ ص‬ٚ‫وخص هذ هخرِظ‬٤‫حُظطز‬ٝ ‫خ حُ٘خشجش‬٤‫ؿ‬ٌُٞٞ٘‫حُظ‬ٝ .‫خٗخص‬٤‫حُز‬ٝ ‫ حألٗظٔش‬٢‫كشص حإلػشحس ك‬ ‫د‬ٝ‫ حُلذ‬٠‫ؼش طظخط‬٤‫ش حُخز‬٤ٗ‫زشح‬٤‫هذ أطزلض حألٗشطش حُغ‬ٝ ،ُْ‫ٍ حُؼخ‬ٞ‫ ك‬٢‫خع‬٤‫ع‬ٞ٤‫ذ حُـ‬ٜ‫ش حُٔش‬٤‫ـش ُظـ‬٤‫ش ً٘ظ‬٤ُٝ‫حُذ‬ ٍٝ‫ػخص حُوشط٘ش حُظخرؼش ُِذ‬ٞٔ‫س ٓـ‬ٝ‫كوذ أطزق رٔوذ‬ ‫غ‬٤‫ ك‬،٢ٗ‫زشح‬٤‫حعظـالٍ كشص حإلػشحس رخُلؼخء حُغ‬ ‫ش‬٣ٞ‫طط‬ٝ ‫خ‬ٛ‫د‬ٜٞ‫غ ؿ‬٤‫ع‬ٞ‫ ط‬٠ِ‫ػخص ػ‬ٞٔ‫ حُٔـ‬ٙ‫ز‬ٛ َٔ‫طؼ‬ ٢‫ش حُظ‬٤ُ‫ْ حٌُٔخعذ حُٔخ‬٤‫ش ُظؼظ‬٤‫ـ‬٤‫خ حالعظشحط‬ٜ‫ز‬٤ُ‫أعخ‬ .‫حُٔ٘ظٔخص‬ٝ ‫حُٔئعغخص‬ٝ ‫خ ٖٓ حألكشحد‬ٜ٤ِ‫ ػ‬٢ُٞ‫طغظ‬ ‫ـٔخص‬ٛ ‫ز‬٤‫ْ رظ٘ل‬ٜ‫ٕ ٓؼ‬ٞ‫حُٔظؼخؽل‬ٝ ٕٞ٤‫خر‬ٛ‫ّ حإلس‬ٞ‫و‬٣ٝ ‫ز‬٤‫ ط٘ل‬٠ُ‫ٕ ًزُي ا‬ٞ‫غؼ‬٣ٝ ‫خ ًٔخ‬ٛ‫ح‬ٞ‫ ٓغظ‬٢‫ش ك‬٤‫ش رذحث‬٤ٗ‫زشح‬٤‫ع‬ .َ‫ حُٔغظوز‬٢‫ذح ك‬٤‫ـٔخص أًؼش طؼو‬ٛ ٍٔ‫اٌجشٔبِج اٌىطٍٕ ٌألِٓ اٌغُجشا‬ National CyberSecurity Programme The National CyberSecurity Programme (NCP) was established to focus on delivering the strategic objectives and national priorities set out in the NIACSS in 2012 and the programme has:   Completed a critical network risk assessment programme based on internationally recognised standards and is actively using the outcome of this exercise to deliver protective security enhancements; Utilised the outcomes of the risk assessment programme to identify a set of information security standards and policies required to drive an enhanced and consistent approach to national information security; National Cyber Security Strategy 2018-2023 3 3.1 ٠ِ‫ض ػ‬٤ً‫ ُِظش‬٢ٗ‫زشح‬٤‫ ُألٖٓ حُغ‬٢٘‫ؽ‬ُٞ‫ػغ حُزشٗخٓؾ ح‬ٝ ْ‫ط‬ ‫ش‬٤٘‫ؽ‬ُٞ‫خص ح‬٣ُٞٝ‫حأل‬ٝ ‫ش‬٤‫ـ‬٤‫ذحف حالعظشحط‬ٛ‫ن حأل‬٤‫طلو‬ ٖٓ‫ش ُؼٔخٕ أ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫ حالعظشحط‬٢‫خ ك‬ٜ٤ِ‫ص ػ‬ٞ‫حُٔ٘ظ‬ ‫ن‬٤‫ ططز‬ٟ‫هذ أد‬ٝ )2102( ٢ٗ‫زشح��٤‫حألٖٓ حُغ‬ٝ ‫ٓخص‬ِٞ‫حُٔؼ‬ :‫ش‬٤ُ‫ن حإلٗـخصحص حُظخ‬٤‫ طلو‬٠ُ‫س ا‬ًٞ‫حُزشٗخٓؾ حُٔز‬ ‫ْ ٓخخؽش حُشزٌخص حُلشؿش‬٤٤‫خء ٖٓ رشٗخٓؾ طو‬ٜ‫ حالٗظ‬ ٕ٥‫ظْ ح‬٣ٝ ،‫خ‬٤ُٝ‫ش حُٔؼظٔذس د‬٤٣‫ حُٔؼخ‬٠ِ‫ر٘خء ػ‬ ٖ٤‫ْ ٖٓ أؿَ طلغ‬٤٤‫زح حُظو‬ٛ ‫حعظخذحّ ٓخشؿخص‬ .‫ش‬٤‫هخث‬ُٞ‫ش ح‬٤٘ٓ‫حإلؿشحءحص حأل‬ ‫ػغ‬ُٞ ‫ْ حُٔخخؽش‬٤٤‫حعظـالٍ ٓخشؿخص رشٗخٓؾ طو‬ ‫خعخص‬٤‫حُغ‬ٝ ‫ٓخص‬ِٞ‫ش أٖٓ حُٔؼ‬٤٣‫ػش ٖٓ ٓؼخ‬ٞٔ‫ٓـ‬ ٖٓ‫ أ‬ٙ‫ٓظ٘خعن طـخ‬ٝ ‫س‬ٞ‫ ٓظط‬ٚ‫ؿ‬ٞ‫حُالصٓش الػظٔخد ط‬ .٢٘‫ؽ‬ُٞ‫ٓخص ح‬ِٞ‫حُٔؼ‬ Page 5 of 29  2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬