Governments around the world are required to strengthen their national cybersecurity capabilities to respond effectively to the growing, changing, and sophisticated cyber threats and attacks, thus protecting society and the way of life as a whole. Responsible government institutions need to revise, evaluate, and bolster their national cybersecurity capabilities to fulfill the new requirements, for example regarding new trends affecting cybersecurity, key supporting laws and regulations, and implementations risk and challenges. This report presents a comprehensive assessment instrument for cybersecurity at the national level in order to help countries to ensure optimum response capability and more effective use of critical resources of each state. More precisely, the report - builds a common understanding of the critical cybersecurity capabilities and competence to be assessed at the national level, - adds value to national strategic planning and implementation which impact the development and adaptation of national cybersecurity strategies, - provides an overview of the assessment approaches at the national level, including capabilities, frameworks, and controls, - introduces a comprehensive cybersecurity instrument for countries to determine areas of improvement and develop enduring national capabilities, - describes how to apply the proposed national cybersecurity assessment framework in a real-world case, and - presents the results and lessons learned of the application of the assessment framework at the national level to assist governments in further building cybersecurity capabilities.
翻译:世界各国政府都需要强化本国网络安全能力,以有效应对日益增长、不断变化且复杂化的网络威胁与攻击,从而保护社会及整体生活方式。负责的政府机构需要修订、评估并加强本国网络安全能力,以满足新的要求,例如涉及网络安全的新趋势、关键支撑法律法规、实施风险与挑战等。本报告提出了一套全面的国家级网络安全评估工具,旨在帮助各国确保最佳的响应能力,并更有效地利用各国的关键资源。更具体而言,该报告:- 建立了对国家级关键网络安全能力与素养的共识,- 为国家战略规划与实施增添价值,影响国家网络安全战略的制定与调整,- 概述了国家级评估方法,包括能力、框架与控制措施,- 引入了一套全面的网络安全工具,供各国确定改进领域并发展持久国家能力,- 描述了如何在真实案例中应用所提出的国家级网络安全评估框架,以及- 展示了在国家层面应用该评估框架的结果与经验教训,以协助政府进一步建设网络安全能力。