The UK's 2016 National Cyber Security Strategy reaches its conclusion in 2021. At the midway point of the current strategy, and with an upcoming Spending Review, the focus should now be on building the next strategy. This Briefing Paper poses a series of questions to help frame this debate.