Suppose the government invests in cybersecurity education and training programs at all levels, from schools to professional training courses, to ensure a skilled workforce capable of understanding and mitigating cyber threats. In that case, my side of the answer is yes.
It is better to address solutions steps by steps. So the first thing is to define the borders of that ecosystem. Then inside that Ecosystem, you have to identify the mains variables according to the cyber technologies.
When the variables are know, you should make an evaluation to have an idea of the impact of each on the system. According to your ressources (Budget, team, equipments, ...) you can now give a priority on the problem to addres first.