Kazakhstan’s Cyber Shield Concept
June 2017
Strategies and Action Plans
Kazakhstan’s ‘Cyber Shield’ Concept, approved in June 2017, represents a strategic initiative to bolster national cybersecurity by protecting electronic information resources, information systems, and telecommunications networks. This comprehensive approach aims to ensure the secure use of information and communication technologies (ICT) across the nation.
Development and implementation
The impetus for the Cyber Shield emerged from a directive by then-President Nursultan Nazarbayev in January 2017, emphasising the necessity of a robust cybersecurity framework as a matter of national security. Following this directive, the government approved the concept in June 2017, outlining key areas of state policy required to build a modern and reliable system to mitigate and prevent cyberattacks and hybrid threats.
Key objectives
The Cyber Shield Concept focuses on several critical areas:
- Legal and regulatory framework: Enhancing legislation to address cyber threats effectively and establishing clear guidelines for cybersecurity practices.
- Institutional development: Creating dedicated bodies, such as the National Coordination Center for Information Security, to oversee and coordinate cybersecurity efforts.
- Capacity building: Investing in the education and training of cybersecurity professionals to address the shortage of skilled personnel in the field.
- Public awareness: Increasing awareness among citizens and organisations about cybersecurity threats and best practices to foster a culture of security.
- International cooperation: Engaging with international organisations and foreign counterparts to share knowledge and collaborate on cybersecurity initiatives.
Achievements and progress
Since its inception, the Cyber Shield has led to significant advancements:
- Improved global standing: Kazakhstan’s ranking in the International Telecommunication Union’s Global Cybersecurity Index improved from 103rd in 2017 to 31st in 2020.
- Incident response: The establishment of the National Computer Emergency Response Team (KZ-CERT) has been pivotal in identifying and mitigating cyber threats, registering over 11,000 incidents in the first half of 2021 alone.
- Educational initiatives: Cybersecurity topics have been integrated into educational curricula, and specialised training programs have been developed to cultivate expertise in the field.
Challenges and future outlook
Despite progress, challenges persist, including:
- Evolving threat landscape: The continuous development of digital technologies leads to new vulnerabilities and cyber threats, necessitating ongoing adaptation of security measures.
- Resource constraints: Ensuring adequate funding and resources to implement comprehensive cybersecurity measures remains a concern.
To address these challenges, Kazakhstan plans to develop a new cybersecurity development document, building upon the Cyber Shield’s foundation to adapt to emerging threats and technological advancements.