Initiatives for
As the national authority for Cybersecurity the CCB has developed several initiatives for specific publics which are presented here.
Are you a cybersecurity expert and are you looking for general information on cybersecurity for your organisation or business?
All entities may report, on a voluntary basis, incidents that have a significant impact on the continuity of the services they provide.
This voluntary notification does not have the effect of imposing obligations on the notifying entity that it would not have been subject to if it had not made the notification. When processing a notification, the CCB may nevertheless give priority to mandatory notifications imposed by the NIS2 Law over voluntary notifications.
The Early Warning System (EWS) provides quick and standardised warnings about new cyberthreats and attacks, with the goal of making your organisation more secure and less vulnerable.
With EWS you can receive reports about the threat landscape, warnings about imminent threats, a security rating on your attack surface, indicators of compromise which can help with correlating events, access to the Connect and Share events of the CCB and spear warnings. Spear warnings are individualised warnings on intrusions, leaked credentials, vulnerable systems, etc.
A Coordinated Vulnerability Disclosure Policy (CVDP) is a set of rules determined in advance by an organisation responsible for IT systems that allows participants (or "ethical hackers") with good intentions to identify potential vulnerabilities in its systems or to provide it with all relevant information about them.
A vulnerability rewards program (or "bug bounty" program) covers all rules set by a responsible organization to give rewards to participants who identify vulnerabilities in the technologies it uses. This is a type of coordinated vulnerability disclosure policy which includes rewards for participants based on the amount, importance or quality of the information provided.