This study compares the National Cybersecurity Strategies (NCSSs) of publicly available documents of ten nations across Europe (United Kingdom, France, Lithuania, Estonia, Spain, and Norway), Asia-Pacific (Singapore and Australia), and the American region (the United States of America and Canada). The study observed that there is not a unified understanding of the term "Cybersecurity"; however, a common trajectory of the NCSSs shows that the fight against cybercrime is a joint effort among various stakeholders, hence the need for strong international cooperation. Using a comparative structure and an NCSS framework, the research finds similarities in protecting critical assets, commitment to research and development, and improved national and international collaboration. The study finds that the lack of a unified underlying cybersecurity framework leads to a disparity in the structure and contents of the strategies. The strengths and weaknesses of the NCSSs from the research can benefit countries planning to develop or update their cybersecurity strategies. The study gives recommendations that strategy developers can consider when developing an NCSS.
翻译:本研究对欧洲(英国、法国、立陶宛、爱沙尼亚、西班牙和挪威)、亚太地区(新加坡和澳大利亚)及美洲地区(美国和加拿大)十个国家公开发布的国家网络安全战略(NCSS)文件进行了比较分析。研究发现,各国对"网络安全"一词缺乏统一理解;然而,这些国家网络安全战略呈现出共同趋势,即打击网络犯罪需要多方利益相关者协同努力,因此亟需加强国际合作。本研究采用比较分析方法和国家网络安全战略框架,发现各国在保护关键资产、致力于研发以及强化国家和国际协作方面存在相似之处。研究表明,缺乏统一的底层网络安全框架导致各战略在结构和内容上存在差异。本研究成果所揭示的国家网络安全战略的优势与不足,可为计划制定或更新网络安全战略的国家提供借鉴。本研究为战略制定者在制定国家网络安全战略时提出了可供参考的建议。