This National Cybersecurity Strategy Guide is one of the most comprehensive overviews of what constitute successful cybersecurity strategies. It is the result of a unique, collaborative and equitable multi-stakeholder effort, which taps into the knowledge, experience and expertise of many organisations in the field of national cybersecurity strategies and policies. Specifically, this Guide has been produced by twelve partners from public and private sectors, as well as and academia and civil society.

The partners came together with an appreciation of the need to strengthen cooperation and coordination across the international community on cybersecurity capacity-building. The objective of this effort is to support national leaders and policy-makers in the development of defensive responses to cyber-threats, in the form of a National Cybersecurity Strategy, and in thinking strategically about cybersecurity, cyber-preparedness, response and resilience, building confidence and security in the use of information and communications technologies (ICTs).

The National Cybersecurity Strategy Guide was developed through an iterative approach, which sought to reach agreement through consensus-building. It is based on existing resources and aims to facilitate its use by national stakeholders. Wherever possible, the relevant sources and tools used to develop each set of recommendations are listed in the Reference section to encourage their broader use.

Cybersecurity is a foundational element underpinning the achievement of socio-economic objectives of modern economies. The hope is that the resulting National Cybersecurity Strategy Guide can serve as a useful tool to all stakeholders, including national policy-makers, legislators and regulators, with cybersecurity responsibilities. In addition, it might have broader applicability, as the concepts introduced can be applied at the regional, or municipal levels, as well as adapted for industry.

**

Guide to Developing a National Cybersecurity Strategy – Strategic engagement in cybersecurity (2018)

This work is a co-publication of the International Telecommunication Union (ITU), the World Bank, Commonwealth Secretariat (ComSec), the Commonwealth Telecommunications Organisation (CTO), and NATO Cooperative Cyber Defence Centre of Excellence (NATO CCD COE).

Acknowledgments:

This Guide was developed by twelve partners from Intergovernmental and International Organisations, private sector, as well as academia and civil society and included the following organisations: Commonwealth Secretariat (ComSec), the Commonwealth Telecommunications Organisation (CTO), Deloitte, the Geneva Centre for Security Policy (GCSP), the Global Cyber Security Capacity Centre (GCSCC) at the University of Oxford, the International Telecommunication

Union (ITU), Microsoft, the NATO Cooperative Cyber Defence Centre Of Excellence (NATO CCD COE), the Potomac Institute for Policy Studies, RAND Europe, The World Bank and the United Nations Conference on Trade and Development (UNCTAD).

The team included Katalaina Sapolu (ComSec), Shadrach Haruna (ComSec), Martin Koyabe (CTO), Fargani Tambeayuk (CTO), Andrea Rigoni (Deloitte), Carolin Weisser (GCSCC), Marco Obiso (ITU), Kaja Ciglic (Microsoft), Kadri Kaska (NATO CCD COE), Francesca Spidalieri and Melissa Hathaway (the Potomac Institute for Policy Studies), Erik Silfversten (RAND Europe), David Satola and Sandra Sergeant (The World Bank), and Cecile Barayre (UNCTAD).

The European Union Agency for Network and Information Security (ENISA) provided a significant contribution to the Guide.

The contributions of the following people are also recognised: Grace Acayo, Rosheen Awotar-Mauree, Ben Baseley-Walker, Paul Cornish, Luc Dandurand, Michael Goldsmith, Kemal Huseinovic, Andraz Andy Kastelic, Maxim Kushtuev, Lena Lattion, Gustav Lindstrom, Damien Maddalena, Emily Munro, Lara Pace, Sarah Puello Alfonso, Valeria Risuglia, Taylor Roberts, Monica M. Ruiz, Irene Rubio, Ann Valjataga, Julienne Wright.