Cybercrime Strategy of Mauritius 2017 examination are policy and procedure development, evidence assessment, evidence acquisition, evidence examination, and documenting and reporting. 7.3 PRIORITY NO 3: PROMOTING AN INTELLIGENCE-LED APPROACH AND SHARING INFORMATION Criminals are quick to find ways to exploit new technologies to further their unlawful activities. Agencies must stay up-to-date with these methods so that they can recognise emerging trends, patterns and problem areas. Sharing quality, timely and comprehensive information and intelligence between law enforcement agencies, intelligence agencies and the private sector will lead to a better understanding of cybercrime and more effective responses. This will occur in a privacy-protective way, in accordance with legislative frameworks and with effective oversight. We aim to develop an enhanced intelligence picture of the cybercrime threat facing Mauritius. To achieve this, we will focus our efforts on gathering intelligence from the public, business and government agencies and undertaking mutually beneficial information exchanges with the private sector. In addition, an industry liaison officer within the Cybercrime Unit can also help to achieve this goal as he/she will develop the trust network that is needed and also promote the partnership to combat cybercrime. 7.3.1 Cybercrime intelligence and cyber-defence The value of collecting intelligence information about threat sources and possible cyber-attacks cannot be underestimated. A well-deployed cyber-attack can yield important information that can compromise communication and the economy at large. The changing phase of cyber-attacks as well as ever increasing sophistication of attack methods have complicated the efforts of collecting valuable intelligence information for effective proactive, preventive and protective measures. Cyber-defence relates to defensive actions against activities primarily originating from hostile actors that have political or economic motivation that have an impact on national security, public safety or economic well-being of the society. The cyber-defence environment requires the deployment of technologies and capabilities for real time protection and incident response. Generally, cyber-defence is driven by intelligence on the threat to achieve the kind of defence that directs, collects, analyses and disseminates the relevant actionable intelligence information to the stakeholders concerned for necessary proactive, preventive and protective measures. 7.3.2 Security threat early warning and response Rapid identification, information exchange and remediation can often mitigate the damage caused by malicious cyber space activity. For these activities to take place, it requires the setting up of a cyber-threat monitoring system that will enable to better respond, monitor and coordinate cyber-threats at the national level. The system will have the capability for early detection of potentially devastating cyber-attacks and the ability to respond to cyber security incidents in real 14 | P a g e