The article focuses on the European Union"s approach to the information security as well as to the fight against cybercrime. Besides conceptual aspects of El! policy the practice of information security policy implementation on national level is studied. Two leading countries in information security area Finland and Estonia are chosen as examples.