Cybersecurity as one of the priorities of national policy

Abstract

The criticality of the Internet for today's economy has several implications for cybersecurity policy development, the main of which is the adoption of strategies that approach cybersecurity in a comprehensive and comprehensive manner. That is, cybersecurity policy should include:

• The importance of multi-stakeholder dialogue;
• The importance of economic aspects of cybersecurity;
• Flexible approach to policy formation and implementation;
• Consideration of sovereignty issues in the development of cybersecurity policy;
• Respect for fundamental values;
• Improving international cooperation;
• Strengthening public-private cooperation;
• Strengthening government coordination at the political and operational levels.

Cybersecurity policy in Ukraine should be based on the following principles:

- introduction of a strategic approach to cybersecurity;

- comprehensive solution to cybersecurity problems, including the use of effective coordination mechanisms adapted to the culture and style of governance in the country;

- timeliness, flexibility and adaptability in decision-making in the field of cybersecurity;

- development of national capacity of teams to counter cyber incidents;

- introduction of advanced methods of cybersecurity;

- improving the protection of critical information infrastructures;

- respect for the fundamental values of freedom of information, but with the use of appropriate precautions, checks and balances;

- increasing the cyber literacy of society;

- use of a system of incentives for the development of cybersecurity and the corresponding human resources;

- cooperation with private and non-governmental organizations, development of public-private partnership;

- strengthening the fight against cybercrime;

- encouragement of research and development in the field of cybersecurity;

- development of international cooperation, in particular, by participating in the development of common norms of behavior in cyberspace.

In general, as can be seen from the experience of many countries, cybersecurity policy development is reaching a new level of maturity compared to previous policies of the first decade of the 21st century, with better leadership, better coordination and greater stakeholder involvement. At the same time, the challenges of policy-making are increasing, suggesting that governments are also facing a new level of complexity. For example, the need for greater coordination between agencies needs to be met through a higher degree of centralization, while providing dynamic and fast, almost real-time, decision-making processes at all levels. Another challenge is the need to implement integrated approaches that take into account sovereignty and economic / social issues, the participation of a wide range of public authorities and the expansion of cooperation with the private sector. Another problem is the need to maintain the openness of the Internet and fundamental values in accordance with the 2011 Recommendation of the Council on the principles of Internet policy-making. These and other challenges take time, while the key task for the cybersecurity public sector at the moment is to prepare for and counter possible serious cyber incidents, but in a way that does not undermine the openness of the Internet.