N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V 2. N AT I O N A L C Y B E R S E C U R I T Y GOVERNANCE FRAM EWORK 2.1 INTER-MINISTERIAL CYBER PREVENTION AND CYBERSECURITY COORDINATION COMMITTEE - Coordinate the implementation of European and international initiatives and measures in the field of cyber-prevention and cybersecurity; - Monitor the implementation at national level of policies decided at European and international level; - Advise the Government on cybersecurity and cyber-prevention by identifying the topics and priorities to be developed in this field and the actors responsible for their implementation; - Discuss the positions to be taken by national representatives in European and international fora on cybersecurity and cyber prevention. • On 6 December 2017, the Government Council approved the creation of an inter-ministerial committee responsible for ensuring national coordination in the field of cyber prevention and cybersecurity (CIC-CPCS). The committee’s task is to ensure the pragmatic and swift coordination of initiatives that are part of cyber-attack prevention and cybersecurity. • The CIC-CPCS, which meets on a regular basis under the chairmanship of the High Commissioner for National Protection, has as its mission, in accordance with the specific competences and responsibilities of the entities described below, to: - Ensure the coherence of actions and initiatives undertaken in the fields of cyber-prevention and cyber-security; 2.2 KEY STATE ENTITIES INVOLVED IN NATIONAL CYBERSECURITY GOVERNANCE scale security incidents affecting networks and communication systems. • The High Commission for National Protection (HCPN) is involved in the management of a cyber crisis. Its action is defined through the emergency response plan for attacks against information systems as soon as the crisis is likely to have serious consequences for some of the territory or population of the Grand Duchy of Luxembourg. It also acts as the National Agency for the Security of Information Systems (ANSSI), the mission of which is to define information security guidelines and ensure that measures concerning the security of information systems are put in place. The Government Centre for Computer Emergency Response (governmental CERT/GOVCERT), which also operates under the responsibility of the HCPN, is involved in the management of large- • The Ministry of the Economy is responsible for information security, risk awareness and vulnerabilities in the private sector. In this context, the Economic Interest Group – Security Made in Luxembourg (EIG SECURITYMADEIN.LU), a platform for the promotion of cybersecurity, operates among others the CASES (promotion of information security in companies), the C3 (national centre of expertise in cybersecurity) and the CIRCL (Computer Incident Response Center Luxembourg) initiatives, the latter also acting as a CERT for private and non-governmental entities and municipalities. 21