procedures in line with the development of Information and Communication Technologies. Under specific circumstances, while acting under an on-going attack, strategy might shift from a defense-only operational mindset to an offensive one. On such occasions, the following actions should be taken:  Prosecute Cyber Crime offenders. The Government – through the legal authorities, LEAs, and the NCISA – must dissuade those who would harm the interests of the Nation. To achieve this, efforts must continually be made to make it clear that any cyber attempt on the Nation, whether to rob or harm, is neither easy nor cheap. Attackers must know that they cannot act with impunity. The Government – through the legal authorities, LEAs, and the activity of the NCISA – should be able to identify attackers and act against them, using the most appropriate action among a set of available tools. Law Enforcement Agencies shall focus on criminals who persist in attacking Lebanese citizens and businesses. National authorities should cooperate with international partners to target criminals wherever they are and to dismantle their infrastructure and facilitation networks. LEAs shall also continue to contribute to awareness building and standardization in Cyber Security issues, in close collaboration with the NCISA.  Strengthen the effectiveness of the judicial action to improve the fight against Cyber Crime thus being able to identify, if and when needed, the actors behind a Cyber Attack. In order to be able to accomplish such a complex goal, it is mandatory to have the legal means, along with the technical capabilities, expertise, dedicated infrastructures, and ad-hoc tools.  Strengthen the effectiveness of Law Enforcement Agencies correctly to perform “Attribution to a Cyber Attack.” Authorizations to deploy such a set of actions should be prudently released to specific government institutions according to the nature of action.  Develop an international network of collaboration between judges and investigators, as well as introduce dedicated trainings and educational programs at existing national and international entities located on the Lebanese territory. 3.2 Develop international cooperation in Cyber Security To reinforce the positive effects of the implementation of the National Cyber Security Strategy, it is mandatory that Lebanon works closely with other regional and international actors. In particular, the following actions are highly recommended:  Work with international partners, such as INTERPOL, UN organizations (ITU, UNODC, UNICRI, etc.), European Delegation in Lebanon and European institutions and agencies (Council of Europe, EUROPOL, CEPOL, ENISA, etc.), June 2019 LEBANON NATIONAL CYBER SECURITY STRATEGY 26