QATAR NATIONAL CYBER SECURITY STRATEGY §§In December 2013, Qatar held its first national-level cyber exercise for critical sectors, including banking and finance, energy facilities and networks, government, and transportation, to enhance these organizations’ capabilities to identify and mitigate cyber threats. §§Qatar continues to empower Internet users with the Cyber Safety Education and Awareness programs that provide information on cyber threats and cyber security prevention and detection tools. §§Qatar has established capabilities in digital forensics, enhancing its ability to investigate cyber crime. Qatar’s Cyber Crimes Investigation Center and Information Security Center support efforts to safeguard the general public and crack down on criminals who use sophisticated technologies to carry out criminal activities. §§Qatar has formed strong international alliances and is an active participant in global efforts to shape international standards and norms on cyber security, including efforts in the International Telecommunication Union (ITU), the Forum for Incident Response and Security Teams (FIRST), and Meridian Process.13 The Qatari government is proactively investing in people, developing policies and processes, and implementing technology to improve cyber security for government entities, businesses, institutions, and individuals. Additional efforts, however, are needed to meet the demands of the future as new threats emerge and ICT reliance grows. Efforts to date have largely been distributed and from the bottom up. As a result, cyber security is neither institutionalized at the national level nor implemented across government entities, businesses, and other institutions. The Qatari government’s ability to enforce laws and promote the adoption of cyber security best practices has been limited, making it difficult to combat cyber crime and help entities deter and defend against cyber attacks. While businesses are beginning to appreciate the risks in cyberspace and take actions to improve cyber security, many follow independent policies and cannot obtain the necessary skills and technologies to institute effective cyber security best practices. Although individuals can access information about cyber threats as well as simple yet effective mitigation techniques, users require additional assistance to help maintain the health of their systems and protect their personal information. The efforts discussed above provide a strong foundation for the future; however, government entities, businesses, institutions, and individuals must work together to enhance Qatar’s cyber security. 7