Accessibility

Third Edition of the “Guide to Developing a National Cybersecurity Strategy”: A Better, Bolder, and More Collaborative Playbook for Digital Resilience

A global coalition of 37 organizations, including EU CyberNet, from government, industry, academia, and civil society released on 19 Dcember the third edition of the Guide to Developing a National Cybersecurity Strategy (“the NCS Guide”)—an updated, practical blueprint to help countries plan, implement, and continuously improve cybersecurity at scale.

As digital technologies power inclusive and sustainable development, governments face persistent and evolving cyber risks. The new edition sharpens the focus on actionable safeguards against evolving risk—from those posed by emerging technologies and the proliferation of connected devices to complex supply chains and evolving threat landscape—while elevating implementation roadmaps, measurement and continuous improvement, and cross-border cooperation.

The NCS Guide has become a widely referenced resource for national leaders and policymakers. As countries iteratively refine their strategies, adoption has surged— from 76 countries in 2018 to around 127 in 2021, and 136 today (according to the ITU Global Cybersecurity Index – GCI)—underscoring the importance of long-term, strategic planning to guide investments, set priorities, and build capacity across the public sector and the wider digital ecosystem.

What’s new in the 3rd Edition

  • Hands-on implementation: A clearer sequencing, resourcing, and governance guidance.
  • Measurement that matters: A stronger emphasis on monitoring, evaluation, and learning loops.
  • Resilience by design: Practical safeguards for evolving risk landscape including emerging tech, growing interdependencies, and supply-chain risks.
  • Global cooperation: tools to strengthen regional and international collaboration.

Built by many, for all; This edition is a result of an inclusive, multi-stakeholder effort, nearly doubling the group since 2021. It distills real-world lessons from countries on their second and third strategy iterations and signposts complementary publications to help teams move from policy to practice.



Keep reading similar articles
EU CyberNet Supports Youth Involvement in Cybersecurity in Fiji

EU CyberNet organised a capture-the-flag (CTF) exercise this week in Fiji to introduce cybersecurity to youth as part of its contribution to the Fiji National Cybersecurity and Resilience Convention as well as engaged in sessions on youth employment and online safety.

From Risk to Resilience: Pacific Island Countries to Strengthen Critical Infrastructure

EU CyberNet co-organised a workshop this week in Canberra, Australia bringing together six Pacific Island Countries to strengthen the resilience of critical infrastructure against the combined effects of climate change, cyber threats and emerging technologies.

Save the Date: EU CyberNet Winter School 2027 to Take Place in January in Portugal

EU CyberNet Winter School 2027 will take place from 27 to 29 January in Tomar, Portugal. The 2nd edition, titled “Governing Agentic AI: From Oversight to Operational Resilience”, focuses on how organisations can adopt artificial intelligence (AI) and agentic systems while ensuring the continuous delivery of services during disruptions in AI systems.

Strengthening Cyber and Climate Resilience in the Pacific Region

EU CyberNet, in partnership with the Czech National Cyber and Information Security Agency (NUKIB), the Delegation of the European Union to Australia and the embassies of Estonia and the Czech Republic to Canberra, is organising a workshop this week in Canberra, Australia, bringing together six Pacific Island Countries to strengthen cybersecurity and climate resilience of critical infrastructure.

EU CyberNet Expert Podcast Series: Episode #2 is Released

EU CyberNet has released Episode #2 in its Expert Podcast Series. The episode titled “If AI Fails Tomorrow, Can Your Public Services Still Run?” discusses the Institutional AI Dependency Test that is an evidence-led governance exercise for cyber resilience. The episode features Andra T. Alcalá and is hosted by LAC4 Partnerships and Technical Engagement Manager Leonardo Ortega.

EU CyberNet Crash Course #4: OSINT in the Age of AI

The 4th EU CyberNet Crash Course, titled “OSINT in the Age of AI” and led by EU CyberNet instructor Ago Ambur explored how open-source intelligence (OSINT) is changing through artificial intelligence (AI).