N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V • The Luxembourg Institute of Regulation (ILR) is the single point of contact for Luxembourg in the implementation of the European Directive on security of networks and information systems (NIS Directive) and the competent authority for all sectors referred to in the NIS Law except for the financial sector which remains under the aegis of the Financial Sector Supervisory Commission (“CSSF”). Within this framework, the Institute has been entrusted with new competences in the field of network and information system security as well as in the context of cybersecurity. In concrete terms, the Institute’s role as a competent authority is to ensure that the sectors under its responsibility (energy, transport, health, drinking water, digital infrastructure, and digital service providers) achieve a high common level of security in order to assume responsibility for computer incidents or cyberattacks and thus prevent incidents with a significant impact on the availability, confidentiality and integrity of essential services. • The Ministry of State – Department of Media, Telecommunications and Digital Policy (SMC) follows the European Council’s Working Party on Telecommunications and Information Society and its preparatory meetings. It covers the subject of cybersecurity strategy, particularly in the field of electronic communications networks, under the banner of the Minister for Communications and Media, on behalf of the Ministry of State. • Within the Ministry for Digitalisation, the mission of the Government IT Centre (CTIE) is governed by its amended organic law of 20 April 2009. Within the framework of its remit, its mission includes ensuring the security of information technology, the management of electronic and computer equipment and appropriate security, the administration of the State’s computer network and the production of secure administrative documents. • The mission of the State Intelligence Service is to seek, analyse and process intelligence relating to cyber threats insofar as it may be related to espionage, interference, terrorism, extremism with violent propensity, proliferation of weapons of mass destruction or defence-related products and related technologies. • Two directorates of the Ministry of Foreign and European Affairs are concerned: - The Directorate of Political Affairs coordinates work on cyber diplomacy. This includes following the activities of the Horizontal Working Party on Cyber Issues of the Council of the European Union, the “EU Cyber Diplomacy Toolbox” and the cyber-sanctions regime, as well as other cyber diplomacy activities at international level, in particular within the framework of the United Nations. - The Directorate of Defence is committed to this topic because cyber defence is one of NATO’s core tasks, as cyberattacks are an important part of hybrid warfare. It should also be noted that NATO and the European Union signed a cyber defence cooperation agreement in February 2016 to address the common challenges faced by both organisations. 22