GovCERT.be

GovCERT.be
Name	GovCERT.be
Formed	2006
Jurisdiction	Belgium
Headquarters	Brussels
Parent agency	Belgian Federal Public Service for Home Affairs

GovCERT.be is the Belgian government Computer Emergency Response Team responsible for cybersecurity incident handling, coordination, and advisory services for federal entities and critical infrastructure. It operates within the institutional framework of the Belgian Federal Public Service for Home Affairs and works with international cyber organizations, law enforcement agencies, and private sector stakeholders to enhance national resilience. GovCERT.be engages with national ministries, NATO partners, and European Union cybersecurity bodies to respond to incidents and share threat intelligence.

Overview

GovCERT.be provides proactive and reactive cybersecurity services including incident handling, vulnerability coordination, situational awareness, and information sharing. It interacts with the Belgian Federal Public Service for Home Affairs, Kingdom of Belgium authorities, and regional administrations such as Flemish Region and Walloon Region, while coordinating with cross-border entities like European Union Agency for Cybersecurity, NATO Computer Incident Response Capability, and CERT-EU. GovCERT.be maintains communications with international teams including US-CERT, Danish National CERT, German Federal Office for Information Security, CERT-FR, and JPCERT/CC, and engages with private sector actors like SANS Institute, ENISA, Microsoft, Google, Cisco Systems, and Kaspersky Lab.

History and Establishment

GovCERT.be was created in response to rising cyber threats and European policy developments such as the NIS Directive and initiatives from the Council of the European Union. Its formation was influenced by incidents that affected public administrations and critical sectors, prompting coordination with entities like Federal Police (Belgium), State Security Service (Belgium), and the Ministry of the Interior (Belgium). Early collaborations involved academic partners including Katholieke Universiteit Leuven, Université catholique de Louvain, and research institutes such as imec. GovCERT.be’s establishment parallels developments in other national teams like CERT/CC and follows guidance from multilateral forums including G7, NATO Summit (2006), and OSCE cybersecurity discussions.

Organization and Governance

GovCERT.be is governed under the auspices of the Belgian Federal Public Service for Home Affairs and coordinates with entities such as the College of Prosecutors-General (Belgium), the Council of Ministers (Belgium), and the Prime Minister of Belgium. Its internal structure includes units for incident response, vulnerability coordination, threat intelligence, and outreach, liaising with academic centres such as Université libre de Bruxelles and Ghent University. Governance adheres to Belgian legal instruments like laws passed by the Belgian Chamber of Representatives and oversight from bodies such as the Court of Audit (Belgium). Strategic direction reflects priorities set by the National Security Council (Belgium) and interoperability with standards from ISO/IEC 27001 frameworks and international norms discussed at United Nations General Assembly cyber diplomacy forums.

Responsibilities and Services

GovCERT.be’s responsibilities encompass incident detection, triage, mitigation guidance, coordination of disclosure for vulnerabilities, and the dissemination of alerts and advisories. Services include handling reports from ministries like the Ministry of Finance (Belgium), sector regulators such as the Belgian Institute for Postal Services and Telecommunications, and critical operators in energy Elia (company), transport SNCB/NMBS, and healthcare institutions including Belgian National Institute for Health and Disability Insurance. It issues advisories referencing malware and threat campaigns linked to groups or tools associated with entities like Fancy Bear, Lazarus Group, Emotet, TrickBot, and exploits in software from Microsoft Exchange, Apache HTTP Server, and OpenSSL. GovCERT.be also fosters capacity building through training with partners like Eurocontrol, European Space Agency, World Bank, and academic programmes at Vlerick Business School.

Incident Response and Notable Operations

GovCERT.be coordinates responses to incidents affecting federal networks, public administrations, and critical infrastructure, collaborating with law enforcement units such as the Federal Judicial Police (Belgium) and international investigative teams like Europol. Notable operations have included coordinated responses to ransomware outbreaks implicating variants linked to groups referenced in advisories by NATO Cooperative Cyber Defence Centre of Excellence and mitigation of large-scale phishing campaigns tied to compromised infrastructure linked to providers such as Akamai Technologies and Cloudflare. It has supported cross-border investigations involving states and entities discussed at forums like the Tallinn Manual studies and provided liaison during responses to supply-chain incidents involving vendors like SolarWinds.

Partnerships and Collaboration

GovCERT.be maintains collaborations with European CERTs and national teams including CERT-UK, CERT-NL, CERT-BE (private sector) partners, and sectoral ISACs. It engages in joint exercises with organizations such as EUROPOL, INTERPOL, NATO CCDCOE, ENISA, and research collaborations with Centre for European Policy Studies and Bruegel. Partnerships extend to industry consortia like FIRST and coordination with standards bodies such as IETF, IEEE, and ETSI. GovCERT.be participates in information-sharing platforms used by banks like BNP Paribas Fortis, insurers like AG Insurance, and telecom operators including Proximus and Orange Belgium.

Legal Framework and Compliance

GovCERT.be operates within Belgian laws and European regulations, interacting with instruments like the NIS Directive (EU) and its successor regulations, and data protection rules under the General Data Protection Regulation. Compliance and legal cooperation involve the Belgian Data Protection Authority, judicial authorities such as the Court of Cassation (Belgium), and administrative law overseen by the Council of State (Belgium). Cross-border incident handling respects mutual assistance frameworks including Mutual Legal Assistance Treaty mechanisms and policy guidance from bodies like the European Commission and decisions from the European Court of Justice.

Category:Computer security organizations in Belgium Category:Government agencies established in 2006 Category:Cybersecurity in Belgium