Since there are no identified national cyber security risks, no national cyber security risk management plan has been drawn up and acceptable national cyber security risks and their tolerance limits have not been determined, therefore there is no coordinated risk management process at the national level that would ensure the necessary protection, prevention and response measures and capabilities utilization.
Cyber Security Assurance VK - Lithuania 2022

50% of aid has been granted primarily for the development of information systems aimed at the state , although the role of the private businesses and the citizens in the development of information society has also been touched upon in the Information Society Development Plan. This means that state agencies have received as much aid as the other two target groups put together. The state is also favoured in the distribution of aid within the scope of implementation schemes: the actual target group of the open application call (local authorities, non-profit associations), for example, only received 15% of the money distributed on the basis of the scheme.
Use of European Union funds in promoting information society RKTR - Estonia 2012

Australia Post has not met the requirements of its framework (…) has not fully implemented controls in line with either the Top Four or the four non-mandatory strategies in the Essential Eight [mitigation strategies in the Australian Government Information Security Manual].
Cyber Resilience of Government Business Enterprises and Corporate Commonwealth Entities ANAO - AU 2019

A clear example of shortcomings in strategic considerations is Sweden’s approach to the issues within and in relation to the EU. The work in the EU is high paced and if Sweden is not engaged and influences that work early on, there is a great risk that the international regulatory framework will not favour Swedish interests to the same extent as would otherwise have been possible.
Government control of national information and cyber security – both urgent and important RiR - Sweden 2023

The Federal Procurement Conference has drawn up a model contract clause on cyber-risks. The contractual provisions on information security are a step in the right direction. However, deadlines for reporting cyberincidents vary and would have to be defined in accordance with usual practice. Moreover, the clause would have to be renegotiated for longterm contracts.
Audit of the effectiveness of incident management in protecting federal ICT from cyber-risks SFAO - Switzerland 2022

The strategic and legal framework of cybersecurity was not adopted, which affects the implementation of information measures and security standards. (…) Postponing the adoption and harmonization of the strategic and legal framework of cyber security with the EU legislation does not only result in failure to fulfil the assumed obligations, but contributes to the technological backwardness .
Activities of BiH institutions to ensure the basic assumptions for cyber security SAIBIH - Bosnia and Herzegovina 2022

The feedback given by the Ministry about the impact of the aid changes year on year, and is sometimes the most suitable for the Ministry itself. The expected levels of many indicators that measure the results achieved with the use of the aid have been changed with several of them now more modest than initially determined. This applies mostly to the indicators that were determined in the first years of the programme period and the new indicators added in recent years have generally not been changed. As the Ministry of Economic Affairs and Communications has been one of the quickest to use the EU funds due to its attempts to reduce the impact of recession on the IT sector, then such volatility may have been caused by rushing into things without thinking them through.
Use of European Union funds in promoting information society RKTR - Estonia 2012

One aim of the National AI Strategy is for the public sector to become an exemplar of safe and ethical deployment of AI. The activities to deliver this aim sit across many bodies and have not been underpinned by supporting governance arrangements, clear accountabilities, an implementation plan or performance metrics to track progress. The National AI Strategy – AI Action Plan published in July 2022 summarised activity, but did not set out outcome measures or detailed implementation plans to support the aim for the public sector to become an exemplar. Initially a cross-government AI Strategy Delivery Group was established by the Office for Artificial Intelligence to oversee delivery, but this was disbanded in March 2022.
Use of artificial intelligence in government NAO - UK 2024