5.4 The NCISA facing Cyber Threats The NCISA analyses and manages the risks of Cyber Attacks when new technologies are deployed in the digital transformation process. It shall be responsible for the following:  Setting up a National Cyber Security Incident Management, which maps out the most critical systems, and conducts Cyber Threat analysis, detection, and understanding.  Monitoring technological evolution to anticipate changes and propose the necessary innovations in information systems security.  Conducting audits of service information systems and collecting technical information for the sole purpose of managing Cyber Security incidents affecting these systems.  Strengthening and supporting LEA in the fight against Cyber Terrorism and organized Cyber Crime by improving the means in the following initiatives:  Countering hostile foreign actors;  Preventing Cyber Terrorism;  Countering, on the domestic territory, radical thinking and behavior related to Cyber Space; 5.5 The NCISA and the protection of Operators of Vital Importance (OVI) An Operator of Vital Importance (OVI) or a critical infrastructure is any public or private entity that manages and operates sensitive data and important sectoral services, such as, but not limited to, the telecommunication infrastructure, energy sector, health infrastructure, national personal data platforms, etc.... The NCISA’s role in protecting OVIs shall follow the actions below:  Strengthen the protection of vital operators, particularly in the areas of electronic communications, electricity supply, and digital service companies by adopting strong requirements for Cyber Security safety regulations.  Involve electronic communications operators and web hosting companies in the implementation of detection systems in their networks to detect Cyber Attacks targeting their subscribers (probes, sensors, behavioral detection, etc.).  Provide risk analysis tools and independent systems to assess the level of security and Cyber Security reliability of digital products and services in critical industries. When digital products and services store personal data, or are intended for industries of vital importance, NCISA shall provide assistance for conducting risk analysis and for elaborating best practices in terms of cyber protection. June 2019 LEBANON NATIONAL CYBER SECURITY STRATEGY 43