The scope of the strategy

where citizens, industry and other partners in society and government, play their full part in securing our networks, services and data; • the UK needs a vibrant cyber security sector and supporting skills base that can keep pace with and get ahead of the changing threat.

THE SCOPE OF THE STRATEGY

2.8. This strategy is intended to shape the Government’s policy, while also offering a coherent and compelling vision to share with the public and private sector, civil society, academia and the wider population.

2.9. The strategy covers the whole of the UK. The UK Government will seek to ensure the strategy is implemented for all parts of the UK, recognising that, to the extent that it touches on devolved matters, we will work closely with the devolved Governments on its application to Scotland, Wales and Northern Ireland (respecting the three separate legal jurisdictions, and four education systems, that exist in the UK). Where proposals set out in the strategy relate to devolved matters, their implementation will be agreed as appropriate with those Governments in accordance with the devolution settlements.

2.10. The strategy sets out proposed or recommended actions aimed at all sectors of the economy and society, from central government departments, to leaders across industry and the individual citizen. The strategy aims to increase

cyber security at all levels for our collective benefit and will be the basis on which the UK engages internationally to promote good internet governance.

2.11. In this strategy, ‘cyber security’ refers to the protection of information systems (hardware, software and associated infrastructure), the data on them, and the services they provide, from unauthorised access, harm or misuse. This includes harm caused intentionally by the operator of the system, or accidentally, as a result of failing to follow security procedures.

2.12. Consistent with our assessment of the challenge we face and building on the achievements of the 2011 strategy, this document sets out: • our updated assessment of the strategic context, including the current and evolving threats: who poses the most serious threat to our interests, and the tools at their disposal; • a review of vulnerabilities and how these have developed over the last five years; • the Government’s vision for cyber security in 2021 and the key objectives to achieve that goal, including guiding principles, roles and responsibilities, and how and where government intervention will make a difference; • how we intend to put our policy into practice: setting out where the

Government will lead and where we expect to work in partnership with others; and • how we intend to assess our progress towards our objectives.