National Cyber Security Strategies

The Austrian Strategy for Cybersecurity 2021 (ÖSCS 2021) is a comprehensive framework designed to ensure a secure cyberspace for Austria and the EU, emphasizing resilience against cyber threats. It aligns with EU directives, promotes cooperation among various stakeholders, and aims to bolster Austria's national and international cybersecurity efforts through structured measures, implementation, and continuous monitoring.

The Austrian Cybersecurity Strategy 2013 was Austria’s first national framework to address cybersecurity. It laid the foundation for a coordinated national approach, emphasizing public-private cooperation, protection of critical infrastructure, and alignment with EU-level initiatives. The 2013 strategy remained in effect until it was replaced by the updated 2021 version (ÖSCS 2021).

The Belgian National Cybersecurity Strategy 2.0 (2021–2025) has aimed to "make Belgium one of the least cybervulnerable countries in Europe", strengthen Belgium's digital resilience by securing critical infrastructure, empowering users through awareness and training, and enhancing incident response capabilities via CERT.be and public-private partnerships. Led by the Centre for Cybersecurity Belgium (CCB), the strategy aligns with the EU NIS2 Directive and fosters collaboration among public, private, and academic sectors while actively engaging in international cybersecurity efforts. As the strategy period concludes, Belgium is evaluating its progress and preparing for future cybersecurity initiatives to maintain its position as a digitally secure and trusted nation.

The first Belgian NCSS provided a foundational framework to improve national cybersecurity posture. It focused on raising awareness, establishing basic cybersecurity governance structures, and promoting public-private collaboration. Though relatively high-level, it laid the groundwork for institutional roles and cross-sector coordination, and was eventually replaced by Strategy 2.0 in 2021.

The Updated National Cybersecurity Strategy "Cyber Resilient Bulgaria 2023" outlines Bulgaria’s approach to enhancing national cyber resilience. It focuses on securing critical infrastructure, improving cybersecurity capabilities, fostering public-private partnerships, and ensuring compliance with EU cybersecurity regulations. The strategy also emphasizes international cooperation and strengthening governance mechanisms for cybersecurity.

Bulgaria’s first national cybersecurity strategy, "Cyber Resilient Bulgaria 2020," focused on building a national cybersecurity system, protecting critical digital infrastructure, enhancing legal frameworks, and fostering cybersecurity awareness. It aligned with EU directives and served as the basis for the updated 2021 strategy.

Focused on protecting critical infrastructure, promoting public-private cooperation, and fostering cybersecurity awareness.

The strategy outlines a comprehensive framework for cybersecurity governance, critical infrastructure protection, public-private partnerships, and EU alignment.

Cyprus’ first cybersecurity strategy addressed national coordination for information and communication systems security. It emphasized legal development, public-private cooperation, identification of critical infrastructure, awareness-building, and alignment with EU frameworks. It laid the foundation for institutional and policy advances realized in the 2020 strategy​.

Strengthening national cybersecurity by protecting critical and strategic infrastructure, building whole-of-society resilience, and advancing Czechia's interests through cooperation within the EU and NATO.

A comprehensive framework to enhance national cybersecurity resilience, align with EU/NATO standards, and protect critical infrastructure.

Focused on transitioning from basic cybersecurity capacity-building to more advanced capabilities. Emphasized international cooperation (EU, NATO), cybercrime prevention, critical infrastructure protection, and public-private collaboration​.

Laying the foundations of the Czech Republic’s cybersecurity system: establishing the legal and administrative framework, and building basic cybersecurity capacities.

Denmark's National Strategy for Cyber and Information Security 2026–2029 aims to strengthen digital resilience across society in one of the world's most digitalized nations, at a time of significantly heightened cyber threats. Building on the NIS2 law, the strategy focuses on the areas that fall outside NIS2 requirements - particularly citizens and small and medium-sized enterprises. It emphasizes equipping citizens with the skills to guard against digital fraud, supporting SMEs with knowledge and tools suited to their risk profile, ensuring effective cross-sector handling of incidents affecting critical infrastructure, and positioning cybersecurity as a competitive strength for the business sector. Denmark aims to secure its digital ecosystem, protect national security, and support economic growth in the digital age through initiatives such as a strengthened Cyberhotline, a national anti-fraud forum, a public-private SME-CERT, and a Civil Cyber Programme.

The current in-force strategy is the NCISS 2026–2029, but the objectives remain mapped to the 2022–2024 strategy, which is used as the objectives baseline.

Denmark’s strategy focuses on enhancing cybersecurity resilience, protecting critical infrastructure, fostering public-private collaboration, and aligning with international standards.

A comprehensive upgrade introducing 25 initiatives and 6 sectoral strategies to increase digital resilience, strengthen public-private coordination, and invest DKK 1.5 billion in cybersecurity efforts​.

The first national strategy focused on establishing foundational cybersecurity measures, including ISO 27001 implementation, improved government oversight, public awareness, and early threat assessment capabilities​.

Estonia's National Cybersecurity Strategy (NCSS) 2024–2030, titled "Cyber-Conscious Estonia," reflects the nation’s advanced approach to digital security in one of the world’s most digitalized societies. Building on its reputation as a leader in e-governance and cyber resilience, the strategy emphasizes a proactive, risk-based approach to securing digital infrastructure, enhancing public-private collaboration, and ensuring strong international cooperation. It highlights the importance of protecting critical information infrastructure, fostering a cyber-conscious culture among citizens, and promoting innovation in cybersecurity technologies. By aligning with EU standards and global best practices, Estonia aims to maintain its position as a global leader in cybersecurity, safeguarding its digital society and economic stability.

Focused on safeguarding critical infrastructure, promoting cybersecurity awareness, and fostering innovation in cybersecurity​.

Focused on improving the national cybersecurity framework, enhancing public-private collaboration, and securing Estonia's critical infrastructure​​.

Estonia's first comprehensive cybersecurity strategy, focusing on reducing vulnerabilities, developing a legal framework for cybersecurity, and strengthening international cooperation​.

The 2024 strategy focuses on responding to evolving geopolitical and technological environments, incorporating NIS2 requirements, and enhancing national cybersecurity capabilities, emphasizing international cooperation and cyber defense. ​

Updates the 2013 strategy, focusing on improving cybersecurity governance, international cooperation, and strengthening national cybersecurity capabilities across the public and private sectors.

Focused on securing Finland's information society against emerging cyber threats, with an emphasis on public-private cooperation, crisis management, and enhancing national cybersecurity resilience.

The National Cybersecurity Strategy 2026–2030 reinforces France’s cyber resilience by developing a leading cyber talent ecosystem, raising nationwide cybersecurity maturity, and securing technological sovereignty in critical areas like AI and cryptography. It combats cyber threat proliferation through robust deterrence, coordinated intelligence, and proactive crisis response. The strategy also strengthens European and international partnerships to promote a secure, open, and rules-based cyberspace.

The latest strategy focuses on critical infrastructure protection, digital trust, privacy, cybersecurity resilience, and European digital autonomy. It promotes collaboration among government, private sector, and international partners to strengthen resilience and maintain leadership in global cybersecurity efforts.

France's NCSS outlined five strategic objectives focusing on infrastructure protection, digital trust, and awareness.

The strategy outlines measures to enhance cyber resilience, protect critical infrastructure, foster public-private collaboration, and align with EU and global cybersecurity standards.

Updated approach with four action areas focused on autonomy in digital space, whole-of-government architecture, and Germany’s international role. Introduced stronger emphasis on digital sovereignty​.

Germany’s first strategy laid foundational structures like the National Cyber Response Centre and promoted public-private collaboration and critical infrastructure protection​.

The Strategy establishes a comprehensive whole-of-society framework to strengthen cyber resilience, enhance capabilities and cooperation, and ensure a secure, trusted, and sustainable digital future. To achieve this purpose, the Strategy is structured around four strategic objectives, which establish the strategic directions for strengthening cybersecurity and advancing national cyber resilience. The strategic objectives are: Capacity-Building and Awareness Raising; Strengthening National, European and International Cooperation; Establishing a Whole-of-Society Cybersecurity Governance System; and Strengthening Regulatory Compliance and Enhancing Cybersecurity Policies and Measures.

Greece’s strategy focuses on protecting critical infrastructure, enhancing public-private collaboration, and aligning with EU standards.

An earlier version detailing Greece’s foundational cybersecurity principles and objectives for a secure digital environment. (Available in English and Greek)​

The National Cyber Security Strategy (NCSS), aims are to strengthen and maintain digital prosperity and national cybersecurity resilience by addressing the challenge of a changing world through achieving cybersecurity resilience to threats and challenges, continuously improving people's cybersecurity awareness, effective digitalisation and related security cooperation among public authorities and other economic actors, and enhancing public-society cooperation for defence and security purposes. Hungary emphasizes international cooperation with allies such as NATO, the EU, and the UN, and stresses the importance of coordinated efforts among the government, academia, business, and civil society.

The National Cyber Security Strategy (NCSS) of Hungary aims to ensure a secure, free, and innovative cyberspace while protecting national sovereignty and critical infrastructure. It outlines Hungary’s strategic objectives, tasks, and government tools to address cybersecurity risks and emphasizes international cooperation with allies like NATO, the EU, and the UN.

The strategy focuses on enhancing cybersecurity competence, fostering international cooperation, and leveraging advanced technologies to address evolving cyber threats. It emphasizes the protection of critical infrastructure, national security, and vulnerable groups, including children. The strategy is designed to be reviewed at intervals of no more than three years to assess progress and adapt to evolving cyber threats.

Focuses on securing Iceland's information infrastructure, building capacity, and enhancing resilience. The strategy aims to strengthen national cyber legislation, address cybercrime, and improve response mechanisms, while promoting collaboration among government agencies, businesses, and international partners.

Ireland's NCSS focuses on protecting critical national infrastructure, developing cybersecurity skills, fostering public-private partnerships, and enhancing international engagement. It emphasizes a proactive approach to addressing evolving cyber threats and strengthening the National Cyber Security Centre (NCSC) capabilities.

Focuses on securing Ireland's digital infrastructure, creating the National Cyber Security Centre (NCSC), and protecting critical national infrastructure. It includes measures for tackling cybercrime, government collaboration, and public-private partnerships.

The strategy focuses on protecting critical infrastructure, promoting innovation, and strengthening digital sovereignty while fostering collaboration between public and private sectors.

This framework focuses on enhancing national cyber defense capabilities and improving public-private cooperation, with specific guidelines on securing critical national infrastructures.

The strategy focuses on enhancing Latvia's cybersecurity governance, strengthening resilience against cyber threats, and fostering public and private sector collaboration. It covers critical infrastructure protection, workforce development, and international cooperation to ensure a secure and trustworthy cyberspace in Latvia.

Updated to strengthen Latvia's cybersecurity resilience, improve ICT system capacity, and focus on cybersecurity awareness. It continued the work of the 2014-2018 strategy and emphasized digital security risks.

This strategy focused on the initial development of Latvia's cybersecurity, with an emphasis on critical infrastructure protection, international cooperation, and legal frameworks to manage cyber threats.

Liechtenstein’s Cyber Risk Strategy 2025 defines a modernized national vision for cybersecurity, building on the 2020 strategy. Coordinated by the National Cyber Security Unit, it focuses on stakeholder responsibility, cross-border collaboration, and resilience of essential services and the financial sector. Five strategic fields include: risk recognition, awareness and networking, protection of critical and essential infrastructure, financial sector security, and crisis management. The strategy aligns with EEA regulations and incorporates measurable implementation via an action plan.

Liechtenstein’s first national strategy on cyber risk aimed to build foundational cybersecurity capabilities. It emphasized public awareness, interagency cooperation, and establishing the National Cyber Security Unit. Nine action fields guided efforts, from setting up coordination structures to supporting critical infrastructure and enabling cross-border cooperation. The strategy stressed responsibility, education, and leveraging existing resources. It was valid for three years and laid the groundwork for the 2025 strategy.

The strategy emphasizes strengthening cybersecurity and cyber defense capabilities, promoting a cybersecurity culture and innovation, enhancing public-private partnerships, and fostering international cooperation.

This programme focuses on enhancing the security of electronic information in Lithuania, aiming to ensure cybersecurity by safeguarding critical infrastructures, protecting personal data, and improving the national response to cyber threats.

The strategy focuses on building trust in the digital world, enhancing the resilience of critical infrastructures, and developing a secure digital economy. It includes measures for education, public-private collaboration, and international cooperation, aiming to position Luxembourg as a leader in global cybersecurity efforts.

Focused on building public trust, securing critical infrastructure, and fostering cybersecurity innovation and economic development.

The strategy focused on national cooperation, legal updates, and raising awareness for cybersecurity in Luxembourg.

Malta's NCSS aims to strengthen its digital resilience and ensure the security of its digital infrastructure. The strategy focuses on governance, cyber defense, competence, international cooperation, and risk management. It outlines a shared responsibility approach to combat growing cybersecurity threats and enhance national and international cooperation.

This strategy focused on the establishment of a governance framework, combating cybercrime, strengthening national cyber defense, securing cyberspace, and promoting cybersecurity awareness and education.

The Netherlands Cybersecurity Strategy (NCSS) for 2022-2028 aims to enhance the country's cybersecurity resilience through collaboration across public, private, and civil society sectors. The strategy focuses on improving the security of digital products and services, addressing cyber threats from state actors and criminals, and developing the cybersecurity workforce.

Focused on improving national cybersecurity defenses and strengthening international collaboration in combating cybercrime.

The strategy aimed to address national vulnerabilities, enhance resilience, and improve cooperation with international cybersecurity efforts.

The strategy focused on creating a secure and resilient digital domain, emphasizing collaboration between public and private sectors to address growing cybersecurity risks.

This strategy outlines Norway's approach to enhancing cybersecurity governance, protecting critical infrastructure, and promoting international cooperation, with a focus on strengthening public-private partnerships and improving incident response capabilities.

The Cybersecurity Strategy of the Republic of Poland 2026-2029 sets out the country’s strategic framework for increasing national cyber resilience by strengthening information security, enhancing the capacity to detect and responds to cyber threats, and advancing cybersecurity across the public, military, and private sectors. Building on the previous strategy, it responds to the evolving cyber threat landscape, strengthens the National Cybersecurity System, and aligns with the EU cybersecurity framework. The Strategy focuses on developing cyber resilience, combating cybercrime, protecting critical infrastructure and information systems, enhancing technological capabilities, promoting cybersecurity awareness and skills, and strengthening international cooperation.

The strategy aims to enhance Poland's cybersecurity by strengthening systems, boosting national resilience to cyber threats, and fostering public-private partnerships. It includes clear goals for developing a national cybersecurity system, improving public awareness, and supporting international collaboration.

Updates the 2013 version and refines the framework for addressing emerging cyber threats, strengthening resilience, and enhancing cooperation.

Establishes the first comprehensive approach for securing Poland’s cyberspace, focusing on government and critical infrastructure protection.

Portugal's NCSS aims to enhance the country's cybersecurity resilience by protecting critical infrastructure and improving the security of digital services. The strategy focuses on governance, public-private partnerships, innovation, and the development of a cybersecurity workforce, while aligning with EU regulations and international standards.

The first National Cyberspace Security Strategy, aiming to secure network and information systems, promote secure use of cyberspace, and address vulnerabilities and threats.

Romania's National Cybersecurity Strategy focuses on ensuring secure and resilient IT systems, strengthening institutional frameworks, promoting public-private partnerships, and enhancing international cooperation. It aligns with EU and NATO commitments.

Romania's foundational cybersecurity strategy, focusing on securing the country's critical infrastructure, promoting a resilient digital environment, and enhancing cooperation both nationally and internationally.

The new Strategy seeks to strengthen Slovakia’s cyber resilience by promoting secure digital transformation, technological innovation, national capabilities and trusted cooperation across the cybersecurity ecosystem.

Slovakia's NCSS aims to enhance the country's cybersecurity governance, resilience, and protection of critical infrastructure, services, and citizens. The strategy focuses on adapting to evolving threats, fostering international cooperation, and building a skilled workforce. The implementation plan includes specific tasks, responsible entities, and measurable indicators to track progress.

The NCSS for 2015-2020 provided a framework to develop the cybersecurity governance system in Slovakia. It emphasized institutional and legislative measures, along with international cooperation. The strategy focused on building cybersecurity resilience and enhancing critical infrastructure protection.

The 2009 NCSS was Slovakia's first national strategy for cybersecurity. It established the foundational principles and governance mechanisms for the protection of national infrastructure and sensitive systems, setting the stage for later strategies. It focused on legal and technical frameworks to ensure information security.

Slovenia's NCSS focuses on creating a comprehensive cybersecurity assurance system, improving resilience to cyber threats, and enhancing national and international cooperation. It outlines key areas for development, such as critical infrastructure protection, cybersecurity awareness, and the establishment of a national coordination system. The strategy aims to ensure a secure cyberspace for both public and private sectors.

Focuses on protecting critical infrastructure, enhancing resilience, fostering public-private partnerships, and ensuring alignment with EU directives.

Focused on safeguarding Spain's cyberspace with a comprehensive model of public-private coordination, emphasizing national leadership, and global cooperation to secure ICT systems and critical infrastructures.

Presents the Swedish government’s vision for the future of cybersecurity, focusing on resilience, innovation, and international collaboration.

The strategy focuses on enhancing Sweden's resilience against cyber threats, fostering public-private cooperation, improving cybersecurity education, and aligning with EU directives.

Switzerland’s National Cyberstrategy (NCS) 2023 focuses on leveraging digitalisation while addressing rising cyber threats. Key priorities include cybersecurity education, digital infrastructure protection, enhanced incident and crisis response, combatting cybercrime, and stronger international collaboration. The strategy is jointly steered by federal, cantonal, and private-sector actors and includes detailed implementation measures across five strategic goals​.

This second-generation NCS focused on improving Switzerland’s resilience to cyber incidents, enhancing early detection, response capacity, and private-public cooperation. It built upon the 2012 strategy, reflecting the rapidly evolving threat landscape and increasing interconnectivity in Swiss society. The strategy emphasized shared responsibility across public and private sectors​.

Switzerland’s first NCSS laid the foundation for national cybersecurity policy. It defined goals such as early threat detection, critical infrastructure protection, and cybercrime prevention. The strategy highlighted collaboration, subsidiarity, and a decentralized implementation approach. It also introduced seven key action areas including legal reforms, R&D, international cooperation, and risk analysis​.