5. The Institutionalization of a National Agency for Cyber Security The National Cyber Security and Information System Agency (NCISA) is a governmental authority, operating under the General Secretariat of the Higher Council of Defense, responsible for Lebanon’s information system Cyber Security policies, procedures, and their implementations in line with the Lebanese National Cyber Security Strategy. The NCISA performs its public duties within the framework of the legislation, rules, and regulations pertaining to Cyber Security. The area of activities of this NCISA are, inter alia, to set policies and procedures, to develop plans, to assess vulnerabilities, to identify threats, to enhance awareness, to alert with recommendations- to respond promptly and efficiently to Cyber Attacks in order to maintain the Lebanese cyber environment secure and resilient. The NCISA also defines critical information infrastructure and critical operators, helps to classify data, and establishes a certification framework for high-level digital security products. Moreover, the NCISA aims to raise the level of knowledge in Cyber Security by initiating and spreading awareness through training programs as well as the diffusion of know-how exchanged through international cooperation. The NCISA’s essential role is as a coordinator and facilitator: it coordinates with all government agencies, concerned ministries, and other public institutions and fosters cooperation among the public and private sectors, industry, and academia. The NCISA, within its mandate, assists and supports all stakeholders from the public and private sectors concerned by Cyber Security. The NCISA also provides technical advice and establishes guidelines reflecting public and corporate priorities and best practices in terms of Cyber Security. NCISA shall work closely with concerned ministries and institutions, LEA, and with the industrial sector to assess and share information on the latest criminal threats, help industries defend against threats, mitigate the consequences of Cyber Attacks on Lebanese victims (administration, corporate, industry, individuals…), and create a national template for handling emergency situations in Cyber Space or Cyber Security. 5.1 The NCISA’s mandate at the national level The National Cyber Security Information Agency (NCISA) draws its legitimacy from a country-wide mandate that defines its role and determines its functions, in accordance with the national needs in Cyber Security as defined by the Government’s Strategy. NCISA shall thus be assigned the following tasks: June 2019 LEBANON NATIONAL CYBER SECURITY STRATEGY 40