Accessibility

Third Edition of the “Guide to Developing a National Cybersecurity Strategy”: A Better, Bolder, and More Collaborative Playbook for Digital Resilience

A global coalition of 37 organizations, including EU CyberNet, from government, industry, academia, and civil society released on 19 Dcember the third edition of the Guide to Developing a National Cybersecurity Strategy (“the NCS Guide”)—an updated, practical blueprint to help countries plan, implement, and continuously improve cybersecurity at scale.

As digital technologies power inclusive and sustainable development, governments face persistent and evolving cyber risks. The new edition sharpens the focus on actionable safeguards against evolving risk—from those posed by emerging technologies and the proliferation of connected devices to complex supply chains and evolving threat landscape—while elevating implementation roadmaps, measurement and continuous improvement, and cross-border cooperation.

The NCS Guide has become a widely referenced resource for national leaders and policymakers. As countries iteratively refine their strategies, adoption has surged— from 76 countries in 2018 to around 127 in 2021, and 136 today (according to the ITU Global Cybersecurity Index – GCI)—underscoring the importance of long-term, strategic planning to guide investments, set priorities, and build capacity across the public sector and the wider digital ecosystem.

What’s new in the 3rd Edition

  • Hands-on implementation: A clearer sequencing, resourcing, and governance guidance.
  • Measurement that matters: A stronger emphasis on monitoring, evaluation, and learning loops.
  • Resilience by design: Practical safeguards for evolving risk landscape including emerging tech, growing interdependencies, and supply-chain risks.
  • Global cooperation: tools to strengthen regional and international collaboration.

Built by many, for all; This edition is a result of an inclusive, multi-stakeholder effort, nearly doubling the group since 2021. It distills real-world lessons from countries on their second and third strategy iterations and signposts complementary publications to help teams move from policy to practice.



Keep reading similar articles
Reflecting EU CyberNet Summer School 2026: Francesca Bosco

EU CyberNet discussed with Summer School 2026 participants their experience and thoughts on the future of cyber diplomacy. Read an interview with Francesca Bosco.

Inspiring the Next Generation of Cyber Talent from Fiji and the Bahamas

EU CyberNet, in cooperation with LAC4, supported the participation of teams from Fiji and the Bahamas in the 4th edition of annual international CyberWizards Summer Camp 2026 in Estonia, an initiative dedicated to introducing girls aged 13-16 to cybersecurity and coding.

EU CyberNet Participated in ASEAN-Japan CIIP Workshop

Kaisa Vooremäe, representing EU CyberNet and Estonian Information System Authority presented in the ASEAN-Japan Critical Information Infrastructure Protection (CIIP) workshop the technical and policy approaches from the European Union and Estonia.

EU CyberNet Summer School 2026 Concludes in Florence

The final day of the EU CyberNet Summer School in 2026 brought together the knowledge and skills developed through the Summer School, challenging participants to apply cyber diplomacy principles in a practical simulation.

EU CyberNet Summer School 2026 Day 2 in Review: From Principles to Practice in Cyber Diplomacy

The second day of the EU CyberNet Summer School in Florence focused on practical implementation of cyber diplomacy through expert sessions, peer exchanges and interactive exercises to learn how cyber diplomacy translates into policy, partnerships and concrete action across different stakeholders, regions and institutions.