2025国家网络安全战略制定指南（第三版）

Guide to Developinga National Cybersecurity Strategy T H I R DE D I T I O N 2 0 2 5 SOME RIGHTS RESERVED ISBN 978-92-61-42081-9 (PDF English Edition)© 2025 International Telecommunication Union (ITU) and The World Bank (WB). ThisGuide was developed by thirty-seven Contributors from Intergovernmental and InternationalOrganizations,privatesector,aswellasacademiaandcivilsocietyandincludedthefollowing organizations: Accenture, African Union (AU), Arab League, Axon Partners Group, Commonwealth TelecommunicationsOrganisation (CTO), Council of Europe (CoE), Cybercrime Research Institute (CRI), Cybersecurity CapacityCentre for Southern Africa (C3SA), Deloitte, DiploFoundation (Diplo), European Bank for Reconstruction andDevelopment (EBRD), e-Governance Academy (eGA), European Union CyberNet (EU CyberNet), ExperirēStrategy & Advisory, Forum of Incident Response and Security Teams (FIRST), Geneva Centre for SecuritySector Governance (DCAF), Global Cyber Security Capacity Centre (GCSCC), Global Forum on Cyber Expertise(GFCE), Global Partners Digital (GPD), Hathaway Global Strategies LLC, Inter-American Development Bank(IADB), International Criminal Police Organization (INTERPOL), International Monetary Fund (IMF), InternationalTelecommunication Union (ITU), KPMG, Microsoft, NATO Cooperative Cyber Defence Centre of Excellence(CCDCOE),NRD Cyber Security,Organization of American States(OAS),United Nations DevelopmentProgramme (UNDP), United Nations Interregional Crime and Justice Research Institute (UNICRI), UnitedNations Institute for Disarmament Research (UNIDIR), United Nations Office of Counter-Terrorism (UNOCT),United Nations Office for Disarmament Affairs (UNODA), United Nations Office on Drugs and Crime (UNODC),United Nations University (UNU), World Bank (WB), World Economic Forum (WEF), and the European UnionAgency for Cybersecurity (ENISA) contributed to the Guide as observer. All the above-mentioned entities arehereinafter collectively referred to as “Contributors”. RIGHTS&PERMISSION This work is available under the Creative Commons Attribution-NonCommercial 3.0 IGO licence (CC BY-NC3.0 IGO;https://creativecommons.org/licenses/by-nc/3.0/igo/deed.en), unless otherwise indicated in thework. For any uses of this work that are not included in this licence, please seek permission from ITU atcybersecurity@itu.int. Within the scope and under the terms of this licence, you may copy, redistribute and adapt the work fornon-commercial purposes, provided the work is appropriately cited, as indicated below. In any use of thiswork, there should be no suggestion that the International Telecommunication Union, the World Bank or anyof the Contributors endorse any specific organization, products or services. The unauthorized use of theInternational Telecommunication Union, The World Bank or any of the Contributors’ names or logos is not permitted. If you create a translation of this work, you should add the following disclaimer along with thesuggested citation: “This translation was not created by the International Telecommunication Union, the WorldBank or any of the Contributors, which are not responsible for the content or accuracy of this translation.The original English edition shall be the binding and authentic edition”. If you create an adaptation of thiswork, please add the following disclaimer along with the attribution:“This is an adaptation of an originalwork by the International Telecommunication Union, the World Bank and Contributors. Views and opinionsexpressed in the adaptation are the sole responsibility of the author or authors of the adaptation and are notendorsed by the International Telecommunication Union, the World Bank or by any of the Contributors.”Anymediation relating to disputes arising under the licence shall be conducted in accordance with the mediationrules of the World Intellectual Property Organization (http://www.wipo.int/amc/en/mediation/rules). Third-party materials. If you wish to reuse material from this work that is attributed to a third party, such astables, figures or images, it is your responsibility to determine whether permission is needed for that reuseand to obtain permission from the copyright holder. The risk of claims resulting from infringement of anythird party-owned component in the work rests solely with the user. Attribution- Please cite the work as follows: International Telecommunication Union (ITU), The World Bank,et Al., 2025. Guide to Developing a National Cybersecurity Strategy, 3rd Edition – Strategic Engagement inCybersecurity. Creative Commons Attribution-NonCommercial 3.0 IGO licence (CC BY-NC 3.0 IGO). GENERALDISCLAIMERS The designations employed and the presentation of the material in this publication do not imply the expressionof any opinion whatsoever on the part of the International Telecommunication Union, the World Bank or anyof the Contributors concerning the legal status of any country, territory, city or area or of its authorities, orconcerning