2.2 Businesses and organizations Public and private sector organizations and other institutions own personal data, provide services, and operate systems in the digital domain. The connectivity of information systems containing data and services has revolutionized their operations. However, with this technological transformation, one of their key responsibilities is to protect the assets they hold, to maintain the services they provide, and to incorporate the appropriate level of security into the products they sell. Citizens, consumers, and society in general rely on businesses and organizations to take all reasonable measures to protect their personal data and strengthen the resilience of their systems and services. Businesses and organizations must understand that they operate in an environment that will hold them responsible for the consequences and indirect impacts of Cyber Attacks, to which they fall victim. 2.3 Individuals as citizens, employees and consumers Today, the national and international contexts require that valuable assets are secure, not only in the physical world but also in the digital, virtual world. Since, in the virtual world, everything is connected and interdependent, it is crucial that everyone assumes his/her responsibility to take all reasonable steps to protect the hardware – smart phones, tablets, laptops – as well as the data, software, and systems that stand behind the freedom, flexibility, and convenience everyone enjoys in their private and business lives. June 2019 LEBANON NATIONAL CYBER SECURITY STRATEGY 20