As part of its 2021 action plan and with the goal of updating the national cybersecurity strategy, the General Directorate of Information Systems Security (DGSSI) is conducting a study to assess the maturity of national cybersecurity capacities, in accordance with the Cybersecurity Capacity Maturity Model (CMM) developed by the Global Cyber Security Capacity Center (GCSCC) at the University of Oxford.

In this context, workshops were organized from June 24 to 30, 2021, at DGSSI headquarters. These workshops were attended by a selection of representatives with necessary experience and expertise from various backgrounds: public and private sectors, cybersecurity governance bodies, security and defense organizations, critical infrastructure, regulatory agencies, universities, professional associations, and more.

The study, conducted in cooperation with the United Kingdom, benefits from the methodological support and expertise of GCSCC. It takes into account five dimensions that constitute the overall national capacity required for a country to develop its cybersecurity maturity:
 

1. Developing cybersecurity policy and strategy;
2. Encouraging a responsible cybersecurity culture within society;
3. Enhancing cybersecurity knowledge and skills;
4. Establishing effective legal and regulatory frameworks;
5. Managing risks through standards and technologies.

Conducted internationally in over 85 countries, this study is based on consultations with national stakeholders and a set of documentary research. It allows for the evaluation of cybersecurity capacity maturity with the aim of developing tailored national strategies and policies. It also identifies priorities for future capacity-building action plans, strengthens public-private sector cooperation, and raises cybersecurity awareness among all stakeholders.