Transfer, through NCISA, the gained knowledge to the private sector in order to
enhance its Cyber Security, while identifying competent and trustworthy service
providers, which should enable the detection and treatment of the inevitable
growth in the number of Cyber Attacks against businesses. The requirements for
Cyber Security must be integrated in public contracting and draft legislation, while
stimulating growth in the Cyber Security sector through:
Integrating security criteria in the selection of digital products and services
in public contracting;
Offering a bonus factor if the bid is accompanied by a Cyber Security risk
analysis;
Ensuring that laws include a section in their impact assessment dedicated
to digital technology, including Cyber Security.
3.8 The role of Law Enforcement Agencies
To improve Cyber Security capabilities, Law Enforcement Agencies (Army, Internal
Security Forces, General Security, State Security) must take the following actions:
Increase the capacity of LEA, in coordination with international partner agencies,
to identify, anticipate, and disrupt hostile cyber activities of foreign actors, Cyber
Criminals, and terrorists. This will improve their intelligence gathering and
exploitation, in order to obtain preventative information about the intentions and
abilities of attackers.
Strengthen law enforcement efforts to prosecute and target criminals, wherever
they may be, in coordination with local and international partners. Law
Enforcement Agencies shall target criminals, who persist in attacking Lebanese
citizens and businesses, by dismantling their infrastructure and facilitation
networks.
Law Enforcement Agencies and the banking sector shall also continue to
contribute to the awareness and standardization of Cyber Security.
Improve the actions of LEA and judicial services in investigations under judicial
authority. The most important enabler factor and approach for all issues related to
Cyber Crimes is dedicated, high-level, professional technical training, which must
include laboratory-based, hands-on modules, sessions, and exercises. Additional
boosters of quality can speed and enhance this process – these include dedicated
procedural, technical, and operational relationships with international Cyber
Security bodies, organizations, and specialized teams, supported by regular
information sharing.
Strengthen coordination across Law Enforcement Agencies, including exchanging
information on threat analysis.
June 2019
LEBANON NATIONAL CYBER SECURITY STRATEGY
33