Brussels, 30 April 2021
DOCUMENT PARTIALLY
WK 5843/2021 INIT
ACCESSIBLE TO THE
PUBLIC (11.04.2023)
LIMITE
CYBER
JAIEX
COPEN
POLMIL
COPS
RELEX
COSI
TELECOM
DATAPROTECT
CATS
IND
CSCI
JAI
CSC
WORKING PAPER
This is a paper intended for a specific community of recipients. Handling and
further distribution are under the sole responsibility of community members.
WORKING DOCUMENT
From:
EEAS
To:
Delegations
Subject:
Cyber Diplomacy Toolbox - Lesson Learnt Exercise
Delegations will find in Annex the EEAS presentation of the Cyber Diplomacy Toolbox Lesson Learnt
Exercise.
WK 5843/2021 INIT
JAI.2 AG/np
LIMITE
EN

CYBER DIPLOMACY TOOLBOX
Lessons Learnt Exercise
EEAS/SECDEFPOL.1
1

Introduction
• Since 2017, the EU and Member States have used the Cyber
Diplomacy Toolbox (CDT) framework on various occasions.
• Lessons learned process is a systematic way of facilitating
organisational learning could feed into the further development and
improvement of the Cyber Diplomacy Toolbox, notably in the context
of the EU Cybersecurity Strategy implementation.
• Member States are asked to fill in a survey and have bilateral talks on
the CDT during this Spring
– There will be report based on this exercise

Aim and scope
• Focus:
1. experiences from using the framework in practice, and
2. assessing the impact of the available implementing
guidelines from different perspectives.
3. further shaping the implementation of the Cybersecurity
Strategy
• Lessons can be:
– Positive – good and best practices that should be
replicated/standardised
– Negative – challenges where there is room for
improvement – experiences should lead to lessons.

Aim and scope
• Categories:
1.
Process regarding decision-making. The spectrum is from the
initiation of the process to preparing and taking a decision. This is an
introspective category: how has the political process worked in
practice, can we identify some best practices, challenges, or gaps in
it?
2.
Measures. This category focuses on the lessons related to the
implementation of decisions: Has the adopted measure been
proportionate to the threat, was it coherent with other EU or
Member State actions, how did the timing of the measure work, etc.
3.
Effect. Did the chosen measures have the desired effect on its target,
and how did they work in the larger EU and international
framework?

Method and timeline
1. MS are asked to fill in surveys on
lessons/cases that they consider relevant
– An email will be sent to you, with a link to the survey. Password will be
sent with another email. You can share these with the relevant
stakeholders within your country.
– Guidelines explained in the document that will be shared together
with the invitation to the survey
– You can save the draft, and come back to it before submitting
– Print/save your contribution as a PDF after submitting
– We are using EUSurvey platform:
https://ec.europa.eu/eusurvey/home/documentation

Method and timeline
• From 17 MAY to 4 JUNE, bilateral talks with
each MS will be organised
– Possibility to discuss more in detail on the input
on the survey
– Opportunity to share more sensitive information,
if need be
• Report end of JUNE

Questions?
7

Document Outline