 Treat anticipation and prevention as a priority for competent authorities dealing in information system security. This can be achieved by building a Cyber Threats Intelligence platform. This CTI platform should receive continuous input data both from domestic (National Agencies) and foreign sources. Data may even be obtained through the acquisition of commercial data sets (“feeds”) from the few specialized, private companies, which provide 100% neutral information, i.e. not officially or unofficially backed by any foreign Government. The CTI platform shall act as the core of the Government’s National CERT (CERT-LB), which must be established within the NCISA. The CERT-LB shall then provide data feeds, alerts, early warnings, etc. to domestic SOCs (Security Operation Centers).  Enhance the Cyber Warfare capabilities of Intelligence Agencies and the Army, by, for instance, securing training sessions and support, exposing them to the activities and best practices of similar Cyber Security Agencies in most advanced countries.  Facilitate coordination among National Agencies, by, for example, hosting periodic meetings to discuss Cyber Security matters, providing facilities to the agencies in order to meet and respond to national cyber incidents, and hosting domestic Cyber Security incident response drills. June 2019 LEBANON NATIONAL CYBER SECURITY STRATEGY 34

Select target paragraph3