Central and Eastern European (CEE) nations find themselves at the forefront of a digital revolution, with cyberspace emerging as a new battleground for security and defence. As the region grapples with the challenges of safeguarding national sovereignty in the cyber age, state defence policy documents and international/regional policies play a vital role in shaping robust cybersecurity strategies. In the modern era, all state defence policy documents explore specific threats and policies relevant to the CEE region, underscoring the significance of cybersecurity in defending against an ever-changing cyber threat landscape.

The cyber threat landscape facing CEE nations is diverse and dynamic. State-sponsored hacking campaigns pose a significant risk, targeting critical infrastructure, government institutions, and military networks. Instances of cyber espionage, where foreign actors seek to steal sensitive information, have also been reported. Moreover, ransomware attacks on businesses, hospitals, and government agencies have disrupted operations and inflicted economic damage.

In Czechia, the National Cyber and Information Security Agency (NCISA) reported attacks on government ministries and institutions, underscoring the seriousness of state-sponsored hacking. Meanwhile, Estonia’s Information System Authority documented a case of cyber espionage targeting government systems to access classified information.

CEE countries have responded with proactive cybersecurity policies embedded in their defence strategies. Poland’s National Cybersecurity System, established in 2017, outlines a comprehensive approach to address cyber threats. This strategy focuses on enhancing national cyber defence capabilities, promoting international cooperation, and investing in cybersecurity education and research.

Similarly, Romania’s National Cybersecurity Strategy, developed in 2014, prioritises enhancing the resilience of critical infrastructure, devising a national cybersecurity incident response plan, and fostering public-private partnerships to counter cyber threats.

Recognizing the cross-border nature of cyber threats, CEE nations have sought to forge robust partnerships in the international and regional arenas. The European Union (EU) has been a key ally in this endeavour. The EU’s Cybersecurity Strategy, formulated in 2013, emphasises building a resilient and secure cyberspace across its member states. Cooperation among EU institutions, member states, and private sectors is prioritised to enhance cyber resilience and combat cybercrime.

Beyond the EU, NATO has played a crucial role in shaping cyber defence policies in the CEE region. NATO’s Cyber Defense Policy, adopted in 2014, designates cyberspace as a new operational domain and emphasises a collective defence approach to cyber threats. The policy underscores the need for cyber incident detection, building resilience, and fostering cooperation with partner countries, including CEE nations.

The rising prominence of cyberspace as a new domain of conflict has underscored the importance of cybersecurity in CEE defence policy. Specific cyber threats, such as state-sponsored hacking, cyber espionage, and ransomware attacks, have compelled CEE countries to adopt proactive measures to protect their digital frontiers.

Through state defence policy documents and international/regional policies, CEE nations have articulated comprehensive cybersecurity strategies. Investments in cybersecurity capabilities, public-private partnerships, and international cooperation form the pillars of their approach.

As CEE nations navigate the complexities of the digital age, a steadfast commitment to cybersecurity becomes imperative. Strengthening sovereignty and safeguarding vital interests in the cyber realm will undoubtedly be a defining factor in their pursuit of security and stability in the years to come. Collaboration, innovation, and resilience will remain the guiding principles as these nations confront the evolving cyber challenges and fortify their defence in the digital arena.