CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 3.3.4 Exercises The Belgian Cyber Emergency Plan was approved by the Council of Ministers in 2017 and describes the procedures to be followed by the various services in the event of a cyber incident. This plan should be evaluated each year and adjusted as needed. The CCB plays a coordinating role in this. Holding regular exercises is important for building resilience to incidents and to test the effectiveness of the Emergency Plan. The lessons learned from these exercises can then inform the annual reviews of this plan. Therefore, the participation of Belgian security forces, other government departments and Organizations of Vital Interest in both international and national exercises is highly desirable. The coordination of Belgian participation in such exercises is ensured by consultation between the CCB, FPS Foreign Affairs, NCCN and the Ministry of Defence. 3.4 Responding to cyber threats Addressing increasing cybercrime and government threats requires investment in the rapid identification of, and response to, danger to our population, to our economy, or to Organizations of Vital Interest. 3.4.1 Mapping the international threats The Continuous monitoring and assessment of international cyber threats is critical to reducing the risk of cyberattacks and incidents. It is the first step of any defence. The cyber intentions and capabilities of “actors” against our essential and vital interests must be identified and the potential sources of threats must be monitored. In order to protect our computer networks, the evolution of their technical tactics, techniques and procedures must be known as much as possible and our means of protection relative to them must be evaluated.. 3.4.2 Disrupting criminal cyber infrastructure Cybercriminals specialize and reuse the attack techniques and software circulating on the Dark Web. To carry out their high-tech or large-scale cyberattacks and also to remain anonymous, they use proprietary as well as compromised computer systems on the internet. 27