6.2 NATIONAL STRATEGIC CONTEXT Cybersecurity is not an end unto itself. Instead, we regard cybersecurity as a means to an end. The goal is to build confidence and trust that critical information infrastructure would work reliably and continue to support national interests even when under attack. Therefore, we deem it important that cybersecurity strategies focus on the threats most likely to disrupt important national activities. The first feature of our model is identification of the factors influencing national cybersecurity activities. 6.2.1 Global Treaties and Conventions We have considered the factors influencing national cybersecurity activities. We trust readers agree that all stakeholders should support coordinated local, national and global multi-sector action. However, no international treaty and convention on cybersecurity is in place to guide the global response. Therefore, national cybersecurity activities are not as effective as they could be. Crucially, agreed norms could help avert actions that may reduce confidence and trust in the use of cyberspace. As a result, ITU Secretary-General Dr. Hamadoun I. Touré has called for a cybersecurity treaty requiring countries to undertake not to make the first cyber strike against other States (Toure 2010). He has championed the treaty out of fear that the next major war is just as likely to start in cyberspace as it is to start on the ground, or at sea, or in the air (Toure 2010c). Since treaties take years to agree and are difficult to enforce, there is growing consensus around agreeing acceptable norms. Thus, the World Telecommunication Development Conference in Resolution 45 (Hyderabad, 2010) and the Plenipotentiary Conference in Resolution 130 (Guadalajara, 2010) asked the ITU Secretary-General and Directors of the Bureaux to prepare a possible cybersecurity Memorandum of Understanding (MoU). 6.2.2 Guiding Principles We aim to share best practices and solutions for creating a culture of cybersecurity. We now identify the principles that often form the basis for cybersecurity strategies. 6.2.2.1 Protecting National Values Like individuals, countries feel they have a unique character. Public officials often define national character as “our way of life.” National values sum up the national character. The values are ideals that a country holds most dear. In some cases, they are the reason a country exists. The values determine a country’s worldview. In common with individuals, countries have a sovereign right to decide their national character. Examples of national values include freedom (choice; pursuit of happiness); rule of law (no one is above the law) and prosperity (economic policy based on transparent rules). Countries can commit treasure, time, energy and even blood to defend the values. We recommend that national cybersecurity strategies support national values. Strategies that support the values often obtain the support of major stakeholders such as the judiciary and citizens. 37