CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 The CCB proposes the Belgian position to the European institutions, among others regarding certification and labelling of products and services. 4.1.1 CERT.BE As the national CSIRT (Computer Security Incident Response Team), the CCB also has an important detecting and alerting role. The Computer Emergency Response Team (CERT.be), as an operational service of the CCB, is responsible for detecting, observing and analyzing online security issues such as cyber threats, vulnerabilities in ICT systems or cyber incidents. CERT.be will continually inform the population, companies, public services and Organizations of Vital Interest about these issues. In this sense, CERT. be is the central hub for exchanging cybersecurity information. 4.2 The Federal Police The integrated police services, in cooperation with their partners, are responsible for combating computer crime. As the first-line police, the local police are the first point of contact for citizens, businesses and government agencies. In this role, they engage the specialized services (RCCU/FCCU) when required. Within the Federal Judicial Police, the Regional Computer Crime Units (RCCUs) and the Federal Computer Crime Unit (FCCU) are responsible for the legal handling of ICT crime. An RCCU is responsible for providing specialized assistance in investigations in a computerized environment — with mainly a supporting role in forensic analysis of ICT material (PCs, smartphones) — for cases concerning all kinds of crime, for both the local police and the Federal Judicial Police of the district of which it is part. It also deals autonomously with the legal approach to computer crime files linked to its district operation. Here, the collection of digital evidence is important, with the aim of tracking down the perpetrators and bringing them to justice. As an operational service, the FCCU is part of the Central Directorate for Combating Serious and Organised Crime. In addition to a forensic support analysis role, primarily as support for the central services, it is responsible, on an autonomous basis, for the legal handling of computer crime cases related to attacks on the ICT infrastructure of critical infrastructures or vital sectors. When it comes to other complex attacks that cannot be 34