This NCS training is first and foremost targeted at policy-makers responsible for developing a National Cybersecurity Strategy. The secondary audience are all the other public and private stakeholders involved in the development and implementation of a Strategy, such as responsible government staff, regulatory authorities, law enforcement, ICT providers, critical infrastructure operators, civil society, academia and research institutions. The training could also prove useful to the different stakeholders in the international development community, who provide assistance in cybersecurity.  

No specific qualifications or experience are needed to participate in this course. Users are invited to request this training through the ITU Academy platform. The ITU Cybersecurity Team will review the requests and confirm the participation. Policy-makers responsible for developing a National Cybersecurity Strategy are prioritized.  

At the end of this training users will be able to: 

• Understand the main concepts and definitions of cybersecurity and understand how cybersecurity operates at the National level 

• Efficiently engage with the Guide to Developing a National Cybersecurity Strategy 

• Understand the five phases of lifecycle of a National Cybersecurity Strategy (Initiation; Stocktaking and Analysis; Production; Implementation; Monitoring and Evaluation) and how they can be implemented in the national context 

• Understand the cross-cutting principles to be addressed for developing a forward-looking and holistic National Cybersecurity Strategy 

• Understand relevant cybersecurity good practices and how they can be applied in the national context 

The training will be delivered entirely online and will combine different didactic approaches: 

• 4 self-paced eLearning modules: Modules 0, 1, 2 and 3 are self-paced digital courses presented as slides with information and media (video, audio, and pictures). These modules contain gamification experience such as questionnaires, simulations, drag-and-drop elements etc. These modules are self-paced which leaves the possibility to users to autonomously organise their learning experience and completion of the modules. 

• 4 digital quizzes: each of the modules include a digital quiz of up to 30 questions to test the knowledge and learning progresses of users. Quizzes include different kind of questions (such as yes/no, multiple choices, branching, drag and drop etc.)   

To successfully conclude the training, all participants will have to attend and pass the following elements: 

• End-module quizzes: all modules will conclude with an assessment quiz of up to 30 questions measuring the learning progress of users. the successful completion of the quiz (at least 70% correct) is essential to proceed to the following Module. If the quiz is failed, users will have to repeat the module and re-take the test. Only participants who have successfully completed all quizzes with a pass-mark of 70% shall be awarded the digital badge.

The training is organised in four eLearning modules, which are based on the Guide to Developing a National Cybersecurity Strategy and https://ncsguide.org. The content will cover the following topics: 

Module 0 Introduction: it introduces participants to the main concepts and definitions of cybersecurity, and provides a solid foundation on how cybersecurity operates at the national level 

Module 1: it provides an overview of the various phases in the development of a Strategy, which include:  

• Initiation 

• Stocktaking and analysis 

• NCS production 

• Implementation 

• Monitoring and evaluation 

Module 2: it presents cross-cutting principles, which help in the development of a forward-looking and holistic National Cybersecurity Strategy, namely : 

• Vision of an NCS 

• Comprehensive approach 

• Inclusiveness 

• Economic and social prosperity 

• Fundamental Human Rights 

• Risk Management and resilience 

• Policy instruments 

• Leadership, roles, and resource allocation 

• Trust environment 

Module 3 : it introduces a set of good-practice elements that can make the Strategy comprehensive and effective, while allowing for tailoring to the national context. These good-practice elements are grouped into the following focus areas: 

• Governance 

• Risk management in national cybersecurity 

• Preparedness and resilience 

• Critical Infrastructure services and essential services 

• Capability and capacity building, and awareness raising 

• Legislation and regulation 

• International cooperation