2 Basis and Principles of Cyber Security The Concept is based on a statement and a description of the basic terms and principles, characteristics of the current situation of the strategic, legal and institutional frameworks in the area of cyber security in the Slovak Republic and on a strategic and methodological framework formed by NATO and European Union (hereinafter referred to as the “EU”) documents; subsequently, the Concept formulates principles, goals and proposed solutions. 2.1 Basic Terms Cyber security is one of the defining elements of the security environment of the Slovak Republic and a subsystem of national security. At a state level, it is a system of continuous and planned increasing of political, legal, economic, security, defence and educational awareness, also including the efficiency of adopted and applied risk control measures of a technical-organizational nature in cyber space in order to transform it into a trustworthy environment providing for the secure operation of social and economic processes at an acceptable level of risks in cyber space. The Slovak Republic still lacks a consistent formalized terminology in the area of cyber security. The word cyber and its other grammatical forms do not occur in any generally binding regulation nor in terminological dictionaries2. Definitions of the practically used terms in the cyber security area and definitions of key terms: cyber security, cyber space, national cyber space for the purposes of this Concept are specified in the Annex no. 1 to the Concept3. For the real performance of state administration in the area of cyber security and to understand the relationship between cyber security and the basic security areas of operation of the state4, a legally binding definition of the meaning of these terms is of crucial importance5. The relation of cyber security to the basic security areas of operation of the state and the mutual relation between cyber security and information security are discussed in the following chapter of the Concept. 2.2 Basic Principles of Cyber Security The field of cyber security must not be seen as an isolated problem of the Slovak Republic or an isolated problem of one or several elements of society. Due to its global nature, cyber security is a society-wide phenomenon. Cyber security must be based on a complex approach, requiring intense joint use of information and coordination of activities on both national and international levels. When building cyber security, it is necessary to pursue collaboration between the civilian and security units of the state, public and private sectors, as well as national and international institutions. Providing for an efficient and effective protection of cyber space must be ensured by relevant entities that are responsible for the infrastructures of individual sectors on a national level and by entities responsible for the operation of international infrastructures6. The Slovak Republic is fully in line with the principles of cyber security specified in the strategic document “Cybersecurity Strategy of the European Union”7 as well as with the principles specified in the “Enhanced NATO Policy on Cyber Defence”8. 6 2 Website of the Ministry of Finance of the Slovak Republic. 3 The Annex is not a binding terminological dictionary for cyber security. 4 Basic security areas of operation of the state in the structure of the Report on Security of the Slovak Republic. 5 Article 2(2) of the Act no. 460/1992 Coll. the Constitution of the Slovak Republic: State bodies can act only on the basis of the Constitution, within its limits and to the extent and in a manner defined by law. 6 For example: Internet Corporation for Assigned Names and Numbers, ICANN; Internet Assigned Numbers Authority, IANA; Governmental Advisory Committee, GAC. 7 Cybersecurity Strategy of the European Union: An Open, Safe and Secure Cyberspace, JOIN(2013). 8 Enhanced NATO Policy on Cyber Defence. 2014.