QATAR NATIONAL CYBER SECURITY STRATEGY
Appendix B. DEFINITIONS
Awareness Campaign.
Communications and outreach activities designed to increase knowledge and support for
cyber security, improve understanding of cyber threats and security practices, and encourage
adoption and ownership of necessary changes in online behaviors.
Capabilities.
People, processes, and technologies that support cyber security efforts.
Critical Infrastructure.
Physical assets, systems or installations, which if disrupted, compromised, or destroyed,
would have a serious impact on the health, safety, security, or economic well-being of Qatar
or the effective functioning of the Qatari government.18
Critical Information Infrastructure (CII).
The information and communications technology systems, services, and data assets that are
critical to Qatar based on the following classification criteria:
1.
Identify the organization’s key, core business processes and their dependency on assets
owned and managed by the organization (e.g., power plant, refinery, general ledger, etc.);
2. Use impact severity table to determine an impact score for the loss/non-functioning of
each key asset; and
3. Classify all assets as critical when the criticality score is greater than twenty (20).19
Impact Severity Table
Impact Factor/Score
Medium/3
High/5
Severe/15
Population Impact
<10
(Potential for loss of life)
10–100
100–500
>500
Economic Impact/QAR
(Direct damage and
restoration cost
including CII
networks/systems)
<20M
20M–200M
200M–1B
>1B
Interdependency
Impact
(On other sectors)
Minor Impact
Moderate
Impact/
Disruption
Significant
Impact/
Disruption
Debilitation
Impact
Scope Impact
Local
Large Local or
National or
Multiple Sectors Single Sector
(Partially)
(Fully)
International
or Multiple
Sectors (Fully)
Service Impact
(Recovery time in days)
<1
1–30
30–180
>180
Public Confidence
Impact
Public
perceives low
national risk,
high ability to
control
Public perceives
moderate
national risk,
moderate
ability to control
Public
perceives high
national risk,
low ability to
control
Public
perceives
severe national
risk, ability to
control in doubt
22
Low/1