QATAR NATIONAL CYBER SECURITY STRATEGY 3.3 Strategic Initiatives The strategic initiatives below describe how Qatar will make progress against the cyber security objectives. While the initiatives are organized by objective, initiatives for one objective may enable progress and success for other objectives. Objective 1: Safeguard national CII. To make progress against the objective, Qatar will: §§Assess the risk to CII; §§Implement cyber security controls and standards to mitigate risk to CII;14 §§Analyze cyber security trends and threats to CII and provide timely reports to stakeholders; §§Foster the use of trustworthy technology products and services; and §§Continuously monitor the security posture of CII. Proactive cyber risk management is necessary to ensure that Qatar continues to identify and protect systems that support the delivery of essential services and capabilities. To prevent future cyber incidents and attacks, the government, critical sector organizations (CSO), and other organizations must adopt security controls and prioritize actions to mitigate risk to those assets, systems, and networks essential to Qatar’s well-being, prosperity, and security. In addition, Qatar is building the capability to collect and analyze cyber security incident, alert, and threat information from the Government Network, a network for government entities to connect over a secure communications platform, thereby allowing for improved information sharing and enhanced security for e-services. Through advanced data analytics, Qatar plans to correlate this information to identify trends related to security requirement compliance and cyber threat activity on the network.15 This continuous monitoring of critical networks will enable Qatar to understand in close to real time the risk to networks, detect incidents, and take immediate actions to mitigate consequences. Objective 2: Respond to, resolve, and recover from cyber incidents and attacks through timely information sharing, collaboration, and action. To make progress against the objective, Qatar will: §§Enhance and maintain situational awareness capabilities;16 §§Establish and continuously enhance incident response capabilities; §§Reduce cyber infections within CII; §§Establish mechanisms and procedures to facilitate timely information sharing and action among stakeholders; and §§Ensure preparedness by conducting cyber security exercises and drills. 10