Page 44 Article III – 1 – 18: Global framework for security incident surveillance, early warning and response Each Member State shall adopt the measures required to establish and maintain crossborder collaboration with other CERT/CSIRT at regional and global levels. Member States may join existing early warning and surveillance networks (WSN) such as FIRST (Forum for Incident Response and Security Team), the European government CERT group (ECG), and others. Chapter V: International Cooperation Article III – 1 – 19: Harmonization Each Member State shall ensure that the legislative measures adopted in respect of material and procedural provisions on cyber security reflect international best practices and integrate the minimum standards contained in extant legislations in the region at large so as to enhance the possibility of regional harmonization of the said legal measures. Article III – 1 – 20: Double criminality The cardinal principle of cooperation in the application of the law against cross-border crime reposes on the fact that the laws under which such cooperation is sought by each Member State should be uniform in terms of prohibited conduct and application procedure. Each Member State shall adopt legal measures that respect the principle of double criminality. Article III – 1 – 21: International cooperation Each Member State shall adopt such measures as it deems necessary to foster exchange of information and the sharing of quick, expeditious and reciprocal data by Member States’ organizations and similar organizations of other Member States with responsibility to cause the law to be applied in the territory on bilateral or multilateral basis. Article III – 1 – 22: Information sharing and cooperation Member States shall create institutions that exchange threat information and on vulnerability assessment such as CERT (Computer Emergency Response Teams) or CSIRTS (Computer Security Incident Response Team). The said teams shall be tasked AU Draft0 010111