Uploaded August 2025 | Updated September 2026, 2 weeks ago
Is cybersecurity now a pillar of national security and foreign policy – or is it still just seen as a tech problem? Using Estonia as a case study, we will explore how one country responded to a major cyberattack by strengthening its digital infrastructure, securing its public services, and making cybersecurity a whole-of-government responsibility.
Estonia's experience demonstrates that cyber threats are not only technical risks – they are national security risks. The 2007 attacks exposed serious vulnerabilities but also catalysed long-term investment in digital resilience, critical infrastructure protection, and stronger coordination between government, industry, and the defence sector.
For Australia, there are clear lessons in how to approach cybersecurity – not in isolation, but as an essential component of our broader national interests, both at home and in the region. As cyber threats become more complex and persistent, integrating cybersecurity into national security and foreign policy is no longer optional – it is essential.
Is cybersecurity now a pillar of national security and foreign policy – or is it still just seen as a tech problem? Using Estonia as a case study, we will explore how one country responded to a major cyberattack by strengthening its digital infrastructure, securing its public services, and making cybersecurity a whole-of-government responsibility.
Estonia's experience demonstrates that cyber threats are not only technical risks – they are national security risks. The 2007 attacks exposed serious vulnerabilities but also catalysed long-term investment in digital resilience, critical infrastructure protection, and stronger coordination between government, industry, and the defence sector.
For Australia, there are clear lessons in how to approach cybersecurity – not in isolation, but as an essential component of our broader national interests, both at home and in the region. As cyber threats become more complex and persistent, integrating cybersecurity into national security and foreign policy is no longer optional – it is essential.
