QATAR NATIONAL CYBER SECURITY STRATEGY Objective 2: Respond to, resolve and recover from cyber incidents and attacks through timely information sharing, collaboration, and action. Initiative Action Enhance and maintain situational awareness capabilities §§ Establish and maintain a national cyber security coordination capability to improve Qatar’s collective understanding of cyber security threats and incidents and help manage the response to national incidents §§ Develop a national system for recording and monitoring cyber threats, incidents, and attacks Establish and continuously enhance incident response capabilities §§ Develop a process for coordinating and managing cyber incident response Reduce cyber infections within CII §§ Conduct regular assessments of networks to identify and remove malicious code on network infrastructure §§ Establish information exchanges between cyber operations centers to facilitate incident response, share information, and provide training opportunities §§ Develop and implement tools to detect APTs attacking CII Establish mechanisms and procedures to facilitate timely action and information sharing among stakeholders §§ Establish and operate systems and tools for disseminating threat and vulnerability information among trusted stakeholders §§ Establish additional sector partnerships to bring stakeholders together to address cyber threats and improve CII preparedness and resilience §§ Establish a forum to bring together security practitioners from across critical sectors to address systemic risks Ensure preparedness by conducting cyber security exercises and drills §§ Hold national cyber security exercises and incorporate lessons learned into policies, procedures, and operational capabilities §§ Conduct sector-specific cyber security exercises to assess and test CSOs’ incident response capabilities §§ Participate in or host international cyber exercises to further establish relationships and test incident response coordination capabilities 14