2024-2028 Türkiye National Cybersecurity Strategy and Action Plan
The increasing security threats in the digital world are leading everyone, from individuals to governments, to focus more on cybersecurity. The National Cybersecurity Strategy and Action Plan (2024-2028) is designed to translate the strategic cybersecurity approach into tangible achievements. The themes of "People," "Defense," "Deterrence," and "Cooperation" are addressed.
Action Plan
The National Cybersecurity Strategy and Action Plan (2024-2028) includes 61 action items defined to achieve our country's cybersecurity goals. These action items detail the work aimed at achieving concrete objectives in line with the defined strategic goals, in collaboration with responsible institutions and stakeholders. The Ministry of Transport and Infrastructure will periodically conduct monitoring and evaluation studies and report on the progress of the actions. Public institutions, the private sector, universities, NGOs, and international stakeholders will work together in this process. The Strategy and Action Plan will be updated as needed in line with technological and national needs, and any incomplete actions will be carried over to the next plan.
Strategic Objectives
In line with the fact that these themes are an important component of national cybersecurity efforts, 6 strategic objectives have been determined within the scope of the National Cybersecurity Strategy and Action Plan (2024-2028).
Cyber Resilience
Increasing and complex cyber threats can cause significant economic damage, loss of life, national security vulnerabilities, and disruption of public order. To mitigate the effects of these threats and increase cyber resilience, qualified efforts must be made to protect information and communication technologies in both the public and private sectors, especially critical infrastructure. Implementing a risk-based analysis approach and supporting emergency and business continuity plans is crucial. Measurement of preparedness levels through national and international exercises and work on integrating cybersecurity into national security are ongoing. Furthermore, the continuous implementation of cybersecurity measures in critical infrastructure sectors through regulations and oversight is necessary. Ensuring secure data traffic in public institutions also aims to increase resilience. Our national cybersecurity objectives are:
H1.1 – Developing a regulation- and oversight-based cybersecurity approach in public institutions and organizations, as well as critical infrastructure sectors.
H1.2 – Adopting a cybersecurity approach based on risk-based analysis and emergency planning at the corporate, sectoral, and national levels.
H1.3 – Data sharing should be carried out through secure infrastructures.
H1.4. – Development of national standardization and testing mechanisms.
2. Proactive Cyber Defense and Deterrence
With the increase in cyber threat actors and attack vectors, the complexity of threats has increased, and hybrid threats have emerged. Therefore, it is necessary to develop the understanding of cyber defense at the same pace. Establishing resilient information and communication infrastructures, creating appropriate solutions, and developing proactive defense processes are essential for effective cybersecurity. Preventive measures taken before an incident are important in terms of providing deterrence. The use of artificial intelligence and big data infrastructures for the detection and prevention of cyber threats, leveraging the opportunities offered by technology, aims to increase national capacity. Furthermore, it is planned to increase the capacity of 24/7 Cyber Incident Response Teams and to ensure that institutions adapt to proactive defense. Our national cybersecurity goals are:
H2.1 – Increasing the competency levels of cyber incident response teams.
H2.2 – Developing capabilities for identifying and reporting cyber risks and threats, and for acquiring and sharing cyber threat intelligence.
H2.3 – Increasing best practices in addressing risks and threats in institutions and organizations.
H2.4 – Increasing coordination on national cybersecurity as part of national security.
H2.5 – Increasing achievements in combating cybercrime.
3. A Human-Centered Cybersecurity Approach
Cybersecurity has become a multi-dimensional discipline encompassing network security, computer incident response, and information security, and includes technological infrastructure, strategy, education, and international collaborations. The human element is central to cybersecurity, with 80% of cyber vulnerabilities stemming from human error. Therefore, increasing individuals' awareness and knowledge of cybersecurity is critically important. Efforts will be made to protect all segments of society from cyber risks and to enable them to use information technologies safely. Developing cybersecurity education at the primary, secondary, and higher education levels and supporting those interested in this field will contribute to the workforce. Our national cybersecurity goals in this regard are:
H3.1 – Increasing individual and societal awareness within the framework of safe use of cyberspace.
H3.2 – Establishing a corporate cybersecurity culture in institutions and organizations.
H3.3 – Strengthening and enhancing the competence of human resources.
4. Safe Use of Technology and its Contribution to Cybersecurity
The secure use of information and communication technologies has become critical. The rapid development of innovative technologies such as artificial intelligence, blockchain, and 5G makes ensuring the security of these technologies a priority. Analyzing the increasing amount of data with big data tools and planning based on the predictions obtained from these analyses, along with modeling support from digital twin technologies, are creating significant trends in the technology world. Adopting a "zero trust" approach for security, establishing minimum security criteria for new technologies, and strengthening cybersecurity are necessary. Significant progress is targeted at the national level through the integration of artificial intelligence and big data infrastructures into cybersecurity efforts. Our national cybersecurity goals are:
H4.1 – Ensuring the safe use of new technologies and taking precautions against potential risks.
H4.2 – Increasing the use of new technologies in efforts to ensure cybersecurity.
5. Domestic and National Technologies in Combating Cyber Threats
Cyber threats maintain their importance on the international agenda, and the misuse of technological advancements in combating them poses a significant problem. Within the scope of national cybersecurity strategies, domestically developed technologies based on the principle of "security from design" offer significant advantages. The goal is to develop these technologies through stakeholder collaboration, and to increase certifications and incentives. The use of domestic and national cybersecurity products and services reduces dependence on foreign sources, supporting national security and economic growth. Furthermore, increasing the share of these products in the global market contributes to the country's national technology drive and sustainable development. Our national cybersecurity goals in this regard are:
H5.1 – Ensuring the transformation of innovative ideas into domestic and national products and services.
H5.2 – Supporting R&D activities to develop and expand the use of domestic and national cybersecurity technologies within the country.
6. The Türkiye Brand in the International Arena
Turkey is taking significant steps towards becoming an international brand in the field of cybersecurity. The country's technological infrastructure, skilled human resources, and strategic approach support its strong position in this area. The emphasis on international cooperation aims to share information in combating threats, develop mutual competencies, and increase Türkiye's visibility in this field. Turkey plays an active role in international platforms, ensuring the implementation of cybersecurity measures and the evaluation of best practices. Efforts will be made to ensure that our country's cybersecurity expertise is considered a leading example at the international level and to develop "cyber diplomacy" capabilities. Our national cybersecurity goals are:
H6.1 – Increasing information sharing and cooperation with international stakeholders.
H6.2 – Increasing the international competitiveness of domestic and national cybersecurity solutions.
Action Plan
The National Cybersecurity Strategy and Action Plan (2024-2028) includes 61 action items defined to achieve our country's cybersecurity goals. These action items detail the work aimed at achieving concrete objectives in line with the defined strategic goals, in collaboration with responsible institutions and stakeholders. The Ministry of Transport and Infrastructure will periodically conduct monitoring and evaluation studies and report on the progress of the actions. Public institutions, the private sector, universities, NGOs, and international stakeholders will work together in this process. The Strategy and Action Plan will be updated as needed in line with technological and national needs, and any incomplete actions will be carried over to the next plan.
Strategic Objectives
In line with the fact that these themes are an important component of national cybersecurity efforts, 6 strategic objectives have been determined within the scope of the National Cybersecurity Strategy and Action Plan (2024-2028).
Cyber Resilience
Increasing and complex cyber threats can cause significant economic damage, loss of life, national security vulnerabilities, and disruption of public order. To mitigate the effects of these threats and increase cyber resilience, qualified efforts must be made to protect information and communication technologies in both the public and private sectors, especially critical infrastructure. Implementing a risk-based analysis approach and supporting emergency and business continuity plans is crucial. Measurement of preparedness levels through national and international exercises and work on integrating cybersecurity into national security are ongoing. Furthermore, the continuous implementation of cybersecurity measures in critical infrastructure sectors through regulations and oversight is necessary. Ensuring secure data traffic in public institutions also aims to increase resilience. Our national cybersecurity objectives are:
H1.1 – Developing a regulation- and oversight-based cybersecurity approach in public institutions and organizations, as well as critical infrastructure sectors.
H1.2 – Adopting a cybersecurity approach based on risk-based analysis and emergency planning at the corporate, sectoral, and national levels.
H1.3 – Data sharing should be carried out through secure infrastructures.
H1.4. – Development of national standardization and testing mechanisms.
2. Proactive Cyber Defense and Deterrence
With the increase in cyber threat actors and attack vectors, the complexity of threats has increased, and hybrid threats have emerged. Therefore, it is necessary to develop the understanding of cyber defense at the same pace. Establishing resilient information and communication infrastructures, creating appropriate solutions, and developing proactive defense processes are essential for effective cybersecurity. Preventive measures taken before an incident are important in terms of providing deterrence. The use of artificial intelligence and big data infrastructures for the detection and prevention of cyber threats, leveraging the opportunities offered by technology, aims to increase national capacity. Furthermore, it is planned to increase the capacity of 24/7 Cyber Incident Response Teams and to ensure that institutions adapt to proactive defense. Our national cybersecurity goals are:
H2.1 – Increasing the competency levels of cyber incident response teams.
H2.2 – Developing capabilities for identifying and reporting cyber risks and threats, and for acquiring and sharing cyber threat intelligence.
H2.3 – Increasing best practices in addressing risks and threats in institutions and organizations.
H2.4 – Increasing coordination on national cybersecurity as part of national security.
H2.5 – Increasing achievements in combating cybercrime.
3. A Human-Centered Cybersecurity Approach
Cybersecurity has become a multi-dimensional discipline encompassing network security, computer incident response, and information security, and includes technological infrastructure, strategy, education, and international collaborations. The human element is central to cybersecurity, with 80% of cyber vulnerabilities stemming from human error. Therefore, increasing individuals' awareness and knowledge of cybersecurity is critically important. Efforts will be made to protect all segments of society from cyber risks and to enable them to use information technologies safely. Developing cybersecurity education at the primary, secondary, and higher education levels and supporting those interested in this field will contribute to the workforce. Our national cybersecurity goals in this regard are:
H3.1 – Increasing individual and societal awareness within the framework of safe use of cyberspace.
H3.2 – Establishing a corporate cybersecurity culture in institutions and organizations.
H3.3 – Strengthening and enhancing the competence of human resources.
4. Safe Use of Technology and its Contribution to Cybersecurity
The secure use of information and communication technologies has become critical. The rapid development of innovative technologies such as artificial intelligence, blockchain, and 5G makes ensuring the security of these technologies a priority. Analyzing the increasing amount of data with big data tools and planning based on the predictions obtained from these analyses, along with modeling support from digital twin technologies, are creating significant trends in the technology world. Adopting a "zero trust" approach for security, establishing minimum security criteria for new technologies, and strengthening cybersecurity are necessary. Significant progress is targeted at the national level through the integration of artificial intelligence and big data infrastructures into cybersecurity efforts. Our national cybersecurity goals are:
H4.1 – Ensuring the safe use of new technologies and taking precautions against potential risks.
H4.2 – Increasing the use of new technologies in efforts to ensure cybersecurity.
5. Domestic and National Technologies in Combating Cyber Threats
Cyber threats maintain their importance on the international agenda, and the misuse of technological advancements in combating them poses a significant problem. Within the scope of national cybersecurity strategies, domestically developed technologies based on the principle of "security from design" offer significant advantages. The goal is to develop these technologies through stakeholder collaboration, and to increase certifications and incentives. The use of domestic and national cybersecurity products and services reduces dependence on foreign sources, supporting national security and economic growth. Furthermore, increasing the share of these products in the global market contributes to the country's national technology drive and sustainable development. Our national cybersecurity goals in this regard are:
H5.1 – Ensuring the transformation of innovative ideas into domestic and national products and services.
H5.2 – Supporting R&D activities to develop and expand the use of domestic and national cybersecurity technologies within the country.
6. The Türkiye Brand in the International Arena
Turkey is taking significant steps towards becoming an international brand in the field of cybersecurity. The country's technological infrastructure, skilled human resources, and strategic approach support its strong position in this area. The emphasis on international cooperation aims to share information in combating threats, develop mutual competencies, and increase Türkiye's visibility in this field. Turkey plays an active role in international platforms, ensuring the implementation of cybersecurity measures and the evaluation of best practices. Efforts will be made to ensure that our country's cybersecurity expertise is considered a leading example at the international level and to develop "cyber diplomacy" capabilities. Our national cybersecurity goals are:
H6.1 – Increasing information sharing and cooperation with international stakeholders.
H6.2 – Increasing the international competitiveness of domestic and national cybersecurity solutions.