CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 2. Risk assessment The Belgian National Risk Assessment 2018-2023 of the National Crisis Centre considers cyber as one of the main risk clusters our country will face in the coming years. Within this cluster, cybercrime and hacktivism against businesses and critical infrastructures are identified as national priority risks. In 2017, we saw how the WannaCry ransomware spread to more than 150 countries and interrupted business activities, and how the NotPetya malware grew in a flash into the most expensive cyber incident ever. Furthermore, the evolution of the cyber threat from financially driven to geopolitically motivated is extremely concerning. Western countries are facing a threat in cyberspace that exceeds the danger of physical attacks. These cyber threats can have serious direct consequences on, for example, our electricity distribution, our banking systems or on the availability of all online services. Continued media coverage of cyber incidents, even minor ones, can cause the public to lose confidence in the digital environment and services, which can have pernicious economic consequences. As part of the hybrid threat, the cyber threat can be used to amplify the effects of other attack methods. With this threat, a combination of, say, a physical attack with a series of cyberattacks can seriously amplify the effect and temporarily create an atmosphere of chaos. This strategy defines national goals for the period 2021-2025 to meet this constantly changing cyber landscape. In order to set the right priorities in formulating these objectives, it is necessary to have a clear picture of the various cyber risks and threats that Belgium may face during this period. This chapter provides a concise overview of key threat actors and technological risks. However, it should be mentioned that risk assessment is an ongoing process. Calibrated consultative platforms, such as the Coordinating Committee on Intelligence and Security and its Platform 4 Cyber, will therefore continue to evaluate the measures taken, monitor cyber trends and adjust objectives as necessary. The preparation of a Belgian contribution to the European 5G risk assessment in 2019 is an example. In addition, as a follow-up to the Belgian National Risk Assessment 20182023, the National Crisis Centre foresees a more in-depth analysis with all 13