Digital transformation is accelerating the digital reliance of critical economic and social activities. In parallel, digital security threats have been growing in number and sophistication. Many governments are anticipating a greater occurrence and severity of digital security incidents affecting critical activities in the coming years, potentially leading to large-scale disasters.This situation pushes governments to adopt policies that strengthen digital security of critical activities. However, such policies should not undermine the benefits from digital transformation in critical sectors through constraints that would inhibit innovation or unnecessarily restrict the use, dynamic nature and openness of digital technologies.