Treat anticipation and prevention as a priority for competent authorities dealing in
information system security. This can be achieved by building a Cyber Threats
Intelligence platform. This CTI platform should receive continuous input data
both from domestic (National Agencies) and foreign sources. Data may even be
obtained through the acquisition of commercial data sets (“feeds”) from the few
specialized, private companies, which provide 100% neutral information, i.e. not
officially or unofficially backed by any foreign Government. The CTI platform
shall act as the core of the Government’s National CERT (CERT-LB), which
must be established within the NCISA. The CERT-LB shall then provide data
feeds, alerts, early warnings, etc. to domestic SOCs (Security Operation Centers).
Enhance the Cyber Warfare capabilities of Intelligence Agencies and the Army,
by, for instance, securing training sessions and support, exposing them to the
activities and best practices of similar Cyber Security Agencies in most advanced
countries.
Facilitate coordination among National Agencies, by, for example, hosting
periodic meetings to discuss Cyber Security matters, providing facilities to the
agencies in order to meet and respond to national cyber incidents, and hosting
domestic Cyber Security incident response drills.
June 2019
LEBANON NATIONAL CYBER SECURITY STRATEGY
34