operators of critical infrastructure may serve the nation better in the long-term. Critical
infrastructure owners and operators play the following roles in strategy elaboration:
Providing insights into how given cyber threats and vulnerabilities affect their sectors;
Offering information on how vulnerabilities affect proprietary systems and software;
Sharing knowledge of what really works due their operational security experience;
Sharing expertise on cyber assets, networks, systems, facilities and functions;
Showing how to balance cybersecurity with efficiency and profitability; and
Contributing to incident response expertise and experience.
We discuss public-private partnerships in strategy implementation in more detail later.
5.3.4
The Judiciary
The judiciary’s main role is to ensure that the nascent cybersecurity strategy aligns with
national law in areas such as privacy. The judiciary also works with global partners to
close gaps in national legislation that may provide a safe haven to cyber criminals.
5.3.5
Law Enforcement
Law enforcement teams enforce cybercrime legislation. The teams should contribute to
the elaboration of national cybersecurity strategy elaboration for the following reasons.
First, law enforcement can validate the enforceability of proposed cybercrime framework.
Second, the teams could advise on current and future national cybercrime investigatory
requirements. Third, law enforcement may provide views on collaborative international
arrangements against cybercrime. Law enforcement teams belong to organisations such
as Interpol and the Virtual Global Taskforce (VGT) on child abuse material.
5.3.6
Intelligence Community
The ITU does not deal with national defence and national security matters. However, for
completeness, we should note that intelligence agencies can play a distinctive role in the
planning and execution of a national cybersecurity strategy. Intelligence agencies have
enduring expertise in monitoring telecommunications networks. For example, agencies
31
32
are experts in cryptography and cryptanalysis . Thus, the agencies may offer insights
into the usefulness of technical countermeasures. We should stress that the involvement
of intelligence agencies is often controversial. Many States segregate civilian and military
networks. Therefore, involving the intelligence agencies in the planning of a strategy may
blur the distinction and provoke civil liberties issues. That said the interconnected nature
of cyberspace and potential attack spill over makes such segregation academic.
31
Cryptography is the art and science of hiding information
Cryptanalysis is the ability to break a code (cipher) and obtain plaintext from ciphertext. Cryptography and cryptanalysis are
sub-domains of cryptology a branch of Mathematics that deals with the science of information secrecy
32
29