N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V SECOND GUIDELINE: PROTECTION OF DIGITAL INFRASTRUCTURES high volumes. Thus, additional protection for digital infrastructures and an increase in the resilience of the ICT sector at national level has been achieved. • With the transposition of the European Directive on security of networks and information systems (NIS) and the identification of critical infrastructure by the HCPN, a new foundation for strengthening the resilience of the State’s digital infrastructure was established under the NCSS III. In the field, one of the concrete results was the implementation of the Distributed Denial of Service (DDoS) attack filtering centre, which mitigates such attacks at • In the context of the refinement of our cyber crisis management procedures, relevant players have participated in major international cyber exercises organised by the European Union and NATO. THIRD GUIDELINE: PROMOTION OF THE BUSINESS LOCATION National Commission for Data Protection (CNPD) has been initiated to make available in Luxembourg an GDPR code of conduct for pseudonymisation and anonymisation. • In 2018, the Ministry of the Economy prepared a data-driven economy strategy (approved by the Government in Council on 26 April 2019). A legal analysis has been carried out in relation to the legislative work that still needs to be done. Since then, the Ministry has launched work on the establishment of a trusted third party in the field of pseudonymisation and anonymisation. This work is coordinated with the establishment of the European High Performance Computing Competence Centre (EuroHPC). Cooperation with the • A new version of the MONARC platform has been developed and now also includes the possibility to link the risk analysis to requirements frameworks and to automatically create statements of applicability (SOA), as foreseen in the ISO/IEC 27001 standard. 48