NC3

National Cybersecurity Competence Center Luxembourg

The National Cybersecurity Competence Center Luxembourg aims to help organisations reach a mature level in managing their cybersecurity competence. That’s an ill-defined concept for organisations to grasp. From the NC3 standpoint, it is the combination of technical skills, know-how and experience. One of the core difficulties is to handle it simultaneaously at the individual and collective levels.

NC3 mission will be achieved through 4 main activities:

• First, the NC3 provides organisations with ways to become aware and document their problems in terms of competence. The main tools are a consistent documentation that will be easily accessible on the NC3 website, and a set of dedicated awareness training.

• Through its second core activity, the NC3 helps organisations identify the specific issues they will need to cover to solve competence-related problems. This will be done by testing their systems and users. The discovery of systems weaknesses is then interpreted as sysmptoms of competence gaps.

• The third stage should support organisations prioritise their resources allocation on the most critical issues. The NC3 observatory provides reference information on security threats and risks to perform arbitrages in the most effective and efficient way. For this purpose, it leverages existing sources of threat information and performs analyses highlighting significant trends and emerging ones. The NC3 aims to provide a dedicated tool to companies to help them choose the best approach to overcome their cybersecurity competence shortcomings. One key characteristic of competence in a digitised environment is that it can be acquired not only through the usual practices, such as training employees or hiring specialists, but also through know-how’s embedded into the software. Acquiring services based on such software can be an alternative to people’s training.

• Finally, the NC3 will give access to competence building solutions in order to allow organisations to implement the decisions they have taken in previous phases. This part of the mission is done by delivering training sessions that are not available through the current market offer and engaging in capacity building operations to increase the pool of available talents in the country. It will also redirect organisations to the most relevant cybersecurity provider of the Luxembourg ecosystem when possible.