Cybersecurity capacity-building work carried out by the e-Governance Academy (eGA) with backing from the European Union under the Global Gateway initiative has yielded substantial results across Central Asia since 2025. Among the outcomes are national cybersecurity assessments covering four countries in the region, training for 585 cybersecurity professionals and government officials, enhanced capabilities at security operations centres and computer emergency response teams, and cyber hygiene instruction reaching 4,649 individuals in Kyrgyzstan.
Merle Maigre, Head of the Cybersecurity Competence Centre at eGA, outlined the partnership's scope while addressing the Central Asia Cybersecurity Summit in Tashkent: "EU–Central Asia relations have grown significantly in recent years, developing into a strong, many-sided and forward-looking partnership. By combining European cybersecurity expertise with regional priorities, we have aimed to build stronger cyber resilience, trusted digital environments and lasting partnerships."
Working through Team Europe, eGA has concentrated its efforts on government bodies in Kyrgyzstan and Tajikistan, with the goal of reinforcing cybersecurity governance structures, updating legal frameworks, building the competency of security professionals, promoting awareness of cyber hygiene among the public, and integrating regional specialists into broader European and international cybersecurity communities. The work operates under the Cybersecurity Component of the Team Europe Initiative on Digital Connectivity in Central Asia, funded by the EU's Global Gateway.
Baseline assessments and policy guidance
Understanding the existing threat landscape and institutional strengths forms the foundation for effective cybersecurity development. eGA produced national cybersecurity baseline studies for Kazakhstan, Kyrgyzstan, Tajikistan and Uzbekistan, complemented by a regional analysis of cybersecurity capabilities across the area.
These baseline studies examined cybersecurity governance frameworks and legislative structures, safeguards for critical information infrastructure, the operational readiness of CERT and CSIRT organisations, and the state of cybersecurity awareness and training programmes. Drawing on desk research, consultations with key stakeholders and on-the-ground visits, the studies delivered actionable recommendations for government decision-makers and cybersecurity institutions, establishing a basis for tailored interventions throughout the region.
eGA specialists delivered targeted recommendations on drafting national cybersecurity laws and strategies. In Kyrgyzstan, this encompassed guidance on critical infrastructure protection requirements and cybersecurity audit procedures. For Tajikistan, eGA contributed recommendations to shape the country's National Cybersecurity Strategy.
To help government officials grasp how other countries approach cybersecurity challenges, eGA delivered training sessions covering the National Cyber Security Index and international legal frameworks governing cyberspace.
Professional skills and technical training
Practical expertise among cybersecurity practitioners has been strengthened through targeted technical instruction. Training modules have addressed CERT certification and accreditation pathways, ISO 27001 standards, computer forensics techniques, and participation in realistic cyber exercises.
A total of 585 cybersecurity specialists and government officials have taken part in the various training programmes to date. Beyond the numerical scope, these figures demonstrate the commitment to maintaining quality standards and sustaining momentum in delivering concrete cybersecurity improvements.
Public awareness and digital literacy
Strengthening cyber resilience at the population level requires foundational digital literacy so that individuals can recognise online hazards and take protective steps. In Kyrgyzstan, eGA implemented a train-the-trainer model, working with instructors from the Data Protection Agency who subsequently conducted cyber hygiene workshops in 40 communities nationwide. This approach reached 4,649 participants and contributed to raising overall digital literacy and online safety awareness.
Regional and international engagement
The initiative extended collaboration beyond individual nations. Cybersecurity professionals and officials representing Kazakhstan, Kyrgyzstan, Tajikistan, and Uzbekistan undertook study visits to Estonia and Finland, participated in the Tallinn Cyber Diplomacy Summer School, and engaged with the Cyber Capacity-Building Fellowship programme.
Robust professional networks enable countries to share insights, learn from security incidents elsewhere and coordinate responses to cybersecurity threats that cross borders. Through the EU's financial support and eGA's technical expertise, partners in Kyrgyzstan and Tajikistan have advanced their capacity in several areas: improved cybersecurity governance structures, institutions with greater capability to manage cyber threats, professionals equipped with enhanced skills to detect and respond to incidents, and populations with heightened awareness of digital dangers and online protection practices. These developments establish a foundation for secure digital growth and dependable digital services throughout Central Asia.
