CYBERSECURITY STRATEGY BELGIUM 2.0 – 2021-2025 The Cybersecurity Strategy in this document addresses four distinct audiences. Three of these audiences are also among those targeted by the National Security Administration: · · · Companies Government Services Organizations of Vital Interest For companies and government agencies, the NSA is developing a number of products that allow for better protection of classified information in a cyber environment. The use of data encryption developed by the NSA can take the security of classified information in the cyber domain to the next level, in both the private and public spheres. For example, the national classified network, the development and organization of use of which still has to be worked out, will facilitate the secure exchange of information between public administrations, thus reducing cyber risks. For certain vital organizations, the NSA can also perform security verifications (security advice or screening of sensitive occupations). To do so, it first requires these organizations to go through a risk analysis, threat analysis and impact analysis and to map out the security measures of their information systems. This process not only raises awareness of the measures taken by these organizations in the cyber domain, but also reinforces these measures. 4.9 The Coordination Unit for Threat Analysis (CUTA) The responsibilities of the Coordination Unit for Threat Analysis (CUTA) include assessing the threat of terrorism and extremism. In the event of cyber threats or incidents that are (potentially) related to terrorist or extremist groups or ideologically or religiously inspired hacktivists, CUTA may conduct a threat analysis for the National Crisis Centre in cooperation with its partner agencies. 4.10 Sectoral authorities The NIS Act of 7 April 2019 (establishing a framework for the security of network and information systems of general interest for public safety) and the implementing Royal Decree of 12 July 2019 specify how sectoral 39