For a better user experience please update your browser or use Chrome or Firefox browser.
Utilities
Publication detail
HomeBuilding effective governance frameworks for the implementation of national cybersecurity strategies
Publication metadata
The importance of a sound governance model for the implementation of the National Cybersecurity Strategies (NCSSs) has been highlighted in numerous testimonies of the Member States as well as included in the NIS and NIS2 Directive. However, each country deploys its own governance model with a different level of maturity. ENISA, taking on its mandate to support and promote the development, deployment and implementation of the NCSS and accompanying governance models, produced this study on "Building Effective Governance Frameworks for The Implementation of National Cybersecurity Strategies". It analyses existing governance models to share a set of good practices when developing a governance model and putting in place the different governance elements. The proposed governance model consists of four layers with 10 sub-categories, and provides a total of 28 good practices: - Political governance - Political processes; - Roles and responsibilities; and - Legal measures. - Strategic governance - Strategy itself and its implementation; and - Risk identification and mitigation. - Technical governance - International standards and technical guidelines; and - Use of technology, tools and certification schemes. - Operational governance - Awareness raising; - Incident response; and - Information sharing. The good practices have been defined based on data collected through desk research and interviews with experts and relevant stakeholders from the Member States. The data collected has been analysed to identify trends, and effective instances across the different elements of governance. While the interviews had a European focus with 19 interviews with stakeholders from 18 EU Member States, the geographical scope of the desk research includes a global outreach. Finally, this report provides insights on KPIs and general indicators to monitor and evaluate the status of implementation of the NCSS and its governance model.
- Published:
- Corporate author(s): European Union Agency for Cybersecurity (EU body or agency)
- Personal author(s): Sarri, Anna ; Fernández Bascuñana, Gema ; Gross, Ann-Kristin ; Chiarelli, Federico ; Preasca, Marina
- Themes: Information technology and telecommunications
- Subject: data collection , directive (EU) , governance , information security , national implementing measure , performance measurement , regulatory policy , report
|
PDF
|
|||
| ISSN | ISBN 978-92-9204-604-0 | DOI 10.2824/850466 | Catalogue number TP-04-22-231-EN-N |
- Released on EU publications website:
Document viewer
Note:
The publication cannot be displayed in the document viewer. Open web version
You may access it from: Download and languages