Accessibility

Third Edition of the “Guide to Developing a National Cybersecurity Strategy”: A Better, Bolder, and More Collaborative Playbook for Digital Resilience

A global coalition of 37 organizations, including EU CyberNet, from government, industry, academia, and civil society released on 19 Dcember the third edition of the Guide to Developing a National Cybersecurity Strategy (“the NCS Guide”)—an updated, practical blueprint to help countries plan, implement, and continuously improve cybersecurity at scale.

As digital technologies power inclusive and sustainable development, governments face persistent and evolving cyber risks. The new edition sharpens the focus on actionable safeguards against evolving risk—from those posed by emerging technologies and the proliferation of connected devices to complex supply chains and evolving threat landscape—while elevating implementation roadmaps, measurement and continuous improvement, and cross-border cooperation.

The NCS Guide has become a widely referenced resource for national leaders and policymakers. As countries iteratively refine their strategies, adoption has surged— from 76 countries in 2018 to around 127 in 2021, and 136 today (according to the ITU Global Cybersecurity Index – GCI)—underscoring the importance of long-term, strategic planning to guide investments, set priorities, and build capacity across the public sector and the wider digital ecosystem.

What’s new in the 3rd Edition

  • Hands-on implementation: A clearer sequencing, resourcing, and governance guidance.
  • Measurement that matters: A stronger emphasis on monitoring, evaluation, and learning loops.
  • Resilience by design: Practical safeguards for evolving risk landscape including emerging tech, growing interdependencies, and supply-chain risks.
  • Global cooperation: tools to strengthen regional and international collaboration.

Built by many, for all; This edition is a result of an inclusive, multi-stakeholder effort, nearly doubling the group since 2021. It distills real-world lessons from countries on their second and third strategy iterations and signposts complementary publications to help teams move from policy to practice.



Keep reading similar articles
EU CyberNet Crash Course #4: OSINT in the Age of AI

The 4th EU CyberNet Crash Course, titled “OSINT in the Age of AI” and led by EU CyberNet instructor Ago Ambur explored how open-source intelligence (OSINT) is changing through artificial intelligence (AI).

At SICW 2026: Strengthening Critical Infrastructure Resilience

EU CyberNet together with National Cyber and Information Security Agency of the Czech Republic (NUKIB) brought together European and Southeast Asian cybersecurity leaders during Singapore International Cyber Week 2026 to strengthen critical infrastructure resilience.

Strengthening Cybersecurity Resilience in Cambodia: EU CyberNet Completes Scoping Mission

EU CyberNet concluded strategic scoping mission in Phnom Pehn, Cambodia this week.

EU CyberNet at the INHOPE Summit 2026: Pathways to Awareness Raising for Young People

EU CyberNet Experts Lead Cecilia Popa attended this week the INHOPE Summit 2026 in Dublin, Ireland. Hosted by Meta, the summit brought together stakeholders around online harm, specifically hotlines working to remove child sexual abuse (CSAM) from the internet and offered platform to discuss how to move towards building coordinated systems for prevention.

Building Cybersecurity Resilience in Lao PDR: EU CyberNet Completes Strategic Scoping Mission

EU CyberNet concluded strategic scoping mission in Vientiane, Laos this week.

At CySec 2026: Workshop on How the AI is Transforming OSINT

EU CyberNet conducted a hands-on workshop titled “AI-Enabled OSINT and Threat Intelligence” at the 4th Brunei Cybersecurity Conference CySec 2026 on 16 September 2026 to support practical knowledge-sharing and cooperation between the European Union and Indo-Pacific region.