Addressing Cybercrime New Zealand has a National Plan to Address Cybercrime. Implementation has, to date, been modest. I expect this refresh of the Cyber Security Strategy and Action Plan to assess whether NZ Police and other agencies have sufficient resources and appropriately trained staff to protect New Zealanders from online crimes and deal with the challenges of emerging technologies. 51. The current Action Plan proposed that New Zealand’s policy and legislative framework should be tested to see whether it remains fit for the purpose of dealing with cybercrime in the digital age. This action has yet to be completed. I propose this work should remain part of New Zealand’s cyber security agenda. 52. Cybercrime is a transnational issue, with perpetrators operating across borders. International collaboration must continue to be part of the solution. I would like the refresh to explore whether NZ Police’s existing international links are sufficient to deliver a comprehensive response to cybercrime. This could include exploring opportunities to build closer links with key international cybercrime units such as the European Cybercrime Centre within Europol and the International Cybercrime Coordination Cell with the Federal Bureau of Investigation. 53. The ability of New Zealand agencies to collaborate more effectively with international counterparts to address cybercrime would be assisted by accession to the Council of Europe Convention on Cybercrime (known as the Budapest Convention). Work is now underway - led by the National Cyber Policy Office and Ministry of Justice - to outline what measures might be required to bring New Zealand’s laws and investigative processes in line with the Convention. Cabinet will consider whether New Zealand should formally express interest in accession to the Convention, and the steps towards accession. e M in is te ro fB ro ad ca s tin g, C om m un ic at io ns an d D 50. by th Cyber diplomacy, deterrence and responses R el ea se d 54. I recommend that we expand our international cyber efforts. This is likely to require additional resources. In the face of increasingly brazen cyber actions, New Zealand will need to be seen and heard in global dialogue on norms of acceptable state behaviour in cyberspace, the applicability of international law, and the importance of an open, free and secure Internet. 2 The National Cyber Security Framework Manual (an internationally recognised best practice guide for states on cyber security published by the NATO Cyber Cooperative Centre of Excellence in Tallinn, Estonia) emphasises the importance of “Whole of Nation” cooperation, referencing the example of the Dutch National Cyber Security Council. https://www.ccdcoe.org/publications/books/NationalCyberSecurityFrameworkManual.pdf 4iz7hypmdw 2018-04-04 16:36:02 ia ed I would also like to explore innovative models to achieve strong cyber security collaboration between the government and the private sector and nongovernment organisations. A structured approach to ensuring private sector engagement with the government’s work (and vice versa) might be one option for consideration. This could include considering models such as advisory boards or a cyber security council2. It may help us to get the right level of engagement with the private sector on cyber security – a challenge which our international partners also face. ig ita lM 49. Page 8