N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V II.8 SECURITY OF THE NETWORKS AND INFORMATION SYSTEMS OF ESSENTIAL SERVICE OPERATORS tial service operators, the ILR will develop the SERIMA risk analysis and management platform, develop sector-specific best practices, initiate awareness campaigns and organise incident management exercises. • The ILR, as the competent national authority and single point of contact, ensures that operators of essential services manage the security of their networks and information systems. In close cooperation with essenII.9 CYBERSECURITY IN THE HEALTH SECTOR tor will be intensified, the security and resilience of key information systems and networks will be strengthened, a centralised Security Event Management System (SIEM) will be implemented, the HealthNet CSIRT will be strengthened, collaborative information sharing on cybersecurity in the health sector will be institutionalised (ISAC) and the implementation of an operational Security Management Centre (SOC) for the entire health sector will be envisaged. • Cybersecurity will accompany the accelerated digitalisation of health services, particularly in the light of developments initiated in the context of the COVID-19 pandemic. Ensuring the security of information and communication systems, medical devices, and more specifically patient data (e.g. the Shared Patient Record) has become a strategic issue. • In close consultation with stakeholders, collaboration with stakeholders in the sec- II.10 IMPROVEMENT OF NATIONAL AND INTERNATIONAL CYBER CRISIS MANAGEMENT PROCESSES AND PROCEDURES EU cooperation and the Cyber Emergency Response Plan will be reviewed. At the national level, exercises for the management of major cyber incidents impacting critical infrastructures will be carried out making use of the national simulation platform (cyber-range). • Luxembourg will continue to participate regularly in international cyber crisis management exercises (e.g. with the EU and NATO). Lessons learned from the exercises will be implemented at the national level. The procedures and decision-making structure for diplomatic response to cyber incidents, specifically in the context of 14