N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V 1 . 2 O B J E C T I V E I I :  S T R E N G T H E N I N G T H E S E C U R I T Y A N D R E S I L I E N C E O F D I G I TA L INFRASTRUCTURES IN LUX EMBOURG The availability, integrity and confidentiality of data are the objectives of cybersecurity: faced with the numerous cyber incidents observed daily, as well as the risks and threats observed on the horizon, the Government has chosen to prioritise strengthening the security and resilience of digital infrastructures as a second strategic objective. The protection of vital infrastructures and essential services is one of the key activities of this objective, as is the wide range of activities of the various operational entities. II.1 STRENGTHENING THE SECURITY AND RESILIENCE OF THE STATE’S DIGITAL PROCESSES AND INFORMATION AND COMMUNICATION SYSTEMS RESTRICTED level, will be evaluated as part of a Proof of Concept. • The security and resilience of digital processes and the underlying critical information and communication systems will be strengthened: - the information portal guichet.lu and myguichet.lu - the State’s electronic messaging platform - the videoconferencing system - the remote access system - fixed and mobile terminal equipment - the DNS system. • The opportunity of implementing a national secure instant messaging solution, initially intended for government departments and agents, will be examined as part of a Proof of Concept. The “LuxChat” solution will be based on a federated architecture with end-to-end message encryption and will be implemented via opensource software. • The opportunity of implementing an encryption solution for the exchange of sensitive messages, classified up to II.2 SECURE AND CONTROLLED USE OF THE PUBLIC CLOUD AT STATE LEVEL governance framework for the use of public Cloud services at State level or in the provision of public services will be defined, considering, in particular, the aspects of security, data protection, location and retention, dependencies and the potential risks of infringement upon government sovereignty and essential services. • In order to respond to the challenges of digital technology in a coordinated and thoughtful manner, the government adopted a cloud strategy in 2016. Investments and the establishment of central services at State level and making them available to State customers via private cloud services such as “Govcloud”, are the preferred route. • Given the advances in the world of digitalisation, the use of the public cloud is becoming essential in certain areas. The 11