Methodology

This website is a public database of official cybersecurity policy documents: national strategies, action plans, laws, regulations, decrees, directives, government guidelines and international documents.

Inclusion criteria

A document is included if it is official (issued by a government, parliament, public agency or international organisation), publicly accessible online and relevant to cybersecurity: protection of networks and systems, critical infrastructure, cybercrime, cyber defence, incident management, digital resilience, and data protection where closely tied to security. Repealed or superseded documents are kept and flagged as such, for historical analysis.

Academic papers, press articles, private-company documents, unofficial drafts and classified or leaked documents are out of scope for now.

Sources

Every record always links to the official source, which remains the primary reference. For collection and cross-checking we use, in line with their terms of use:

• ITU – National Cybersecurity Strategies Repository
• ENISA – National Cyber Security Strategies Interactive Map
• UNODC – Education for Justice, NCSS Repository
• NATO CCDCOE – Library
• EUR-Lex, national official journals (e.g. Normattiva for Italy) and national cybersecurity agencies’ websites.

The “Collected from” field of each record says where the document was collected.

Editing and verification

Summaries are written by the editorial team in the site’s four languages. Automatically generated proposals (summaries, topics, objectives) remain drafts until a person reviews them: every change goes through a reviewed pull request in the GitHub repository, whose history is the change log. Each record shows when it was last verified and by whom.

The first version of the dataset was compiled manually and must be reviewed record by record, as the “verified by” field indicates.

Updates

• A monthly automatic check verifies that links to sources and PDFs are reachable; if a link breaks, the record stays usable through the Wayback Machine snapshot.
• A periodic check of the seed sources detects new documents, which arrive as drafts for review.
• Anyone can report a missing document or an error with the report form.

Taxonomies

Document types, topics and strategic objectives (inspired by ENISA’s NCSS taxonomy) are controlled vocabularies, translated into the four languages and managed in the repository.