responsible for upholding the common interest and promoting the common good,
and motivated by a powerful sense of patriotism.
The lack of collaboration mandates between administrations at the national
level: Every institution is working on its security separately without a clear
framework of collaboration with other institutions. Institutions would benefit
from sharing and exchanging information and data. In addition, there is a lack of
collaboration and cooperation across the different departments of the same
institution, especially in the field of security. Each department and unit act and
work independently rather than cooperating to secure the overall
organization/institution.
The lack of active participation of the private sector in the advancement of
the public sector: The public sector lacks a regulatory role and awarenessbuilding system and relies on the private sector to cover the shortage in experience
and development capacity of its IT departments and positions, and to secure and
provide IT-related and Cyber Security services. It is important for the public
sector to outsource such services. However, the Lebanese public sector came out
weaker from such collaboration with the private sector. Records show that the
private sector did not successfully or adequately manage handing over these IT
projects to the public sector and it did not benefit as it should have from the
completion of such projects. This should be addressed in any future partnerships
with the private sector and/or international cooperation in order to ensure
constructive outcomes.
The absence of an initiative for a National Information System and Digital
Transformation Strategy at the highest level: Despite all the efforts exerted
independently or through OMSAR in e-government and automation projects
since 1995 in various ministries, Lebanon continues to fall short on developing a
nation-wide vision with a cooperative inter-institutional approach. There is an
evident and serious imbalance between institutions and ICT coordination is not
institutionalized at the highest level, which makes detecting, identifying, and
managing Cyber Security-related incidents very difficult. Within such an
environment, the effective use of Cyber Security and Cyber Defense to protect
citizens, and public or private organizations targeted by Cyber Attacks becomes
seriously compromised.
The shortage of Cyber Security experts and the difficulty to adapt to rapid
changes: Administrative bodies, companies, and universities in Lebanon are in
desperate need of developing awareness and creating a well-structured and
balanced Cyber Security atmosphere by targeting educational and training
programs at all levels (universities, jobs, conferences, etc.), to be ready to respond
to the rapid development in the nature of Cyber Crimes and the methods used.
June 2019
LEBANON NATIONAL CYBER SECURITY STRATEGY
10