N AT I O N A L C Y B E R S E C U R I T Y ST R AT E GY I V II.11 PROMOTION OF COLLABORATION AND INFORMATION EXCHANGE BETWEEN THE PUBLIC AND PRIVATE SECTORS If necessary, the coordination may also be taken over by CIRCL or, in the event of a crisis, by the cyber crisis unit set up by the HCPN. • In close cooperation with ICT Luxembourg and the federations represented there, the State will set up a transversal working group (cyber TWG) to organise, structure and boost exchanges and mutual assistance in the cyber field. The aim of this cyber TWG is to exchange information proactively and rapidly on attacks with a high propagation potential. • The Threat Intelligence Sharing Platform (MISP), the Risk Scenario Sharing Platform (MOSP) and any other tools or services identified as necessary, will serve as platforms for information exchange and support a dynamic and rich exchange on threats, vulnerabilities, and any measures to be implemented. • If necessary, the cyber TWG will also coordinate the various private incident management teams to boost mutual support. II.12 SECURITY OF TELECOMMUNICATIONS NETWORKS AND SERVICES and coordination with telecommunications network operators will be developed, notably with a view to implementing the security measures of the 5G toolkit. • Security of telecommunications networks and services Directive (EU) 2018/1972 of 11 December 2018 establishing the European Electronic Communications Code will be transposed into national law. Exchange II.13 SUPPLY CHAIN SECURITY base themselves on the recommendations and good practices for the State, critical infrastructure operators, OSEs, etc. in this area. • The State’s responsible entities will continue to work to improve detection and response capabilities to risks and threats throughout the hardware, software, and services supply chain. To this end, they will II.14 SECURING E-MAIL COMMUNICATIONS AT THE NATIONAL LEVEL - Development of an offer to assess the security of e-mail servers by the C3 - Promotion and support for the implementation of the standard for domain protection and authentication of e-mail -DMARC • E-mail is the major attack vector for specific actions that target users, such as phishing. A set of specific measures will be implemented to further secure e-mail services: - Encouraging e-mail service providers to raise awareness among their customers and offer them the spambee.lu national spam notification solution 15