D2.4 REPORTING MECHANISMS This factor explores the existence of reporting mechanisms functioning as channels for users to report internet related crime such as online fraud, cyber-bullying, child abuse online, identity theft, privacy and security breaches, and other incidents. Maturity Stage: Formative In Iceland, the public and private sectors provide some channels for reporting, child abuse online, but these channels are not coordinated and are used in an ad-hoc manner. Promotion of the existing reporting channels has not yet begun or is ad-hoc. As regards to channels for reporting identity theft, privacy and security breaches, and other incidents, such channels are almost non-existent. A system for reporting security breaches is being developed (autumn 2017). A hotline through Barnaheill – Save the Children Iceland32 focuses on child abuse. Its website also provides an online form to report illegal content. Barnaheill has operated a Hotline since November 2001. The Hotline has worked very closely with the police and with other Hotlines. The hotline is a member of the international organisation INHOPE, and participates actively in its development33. The National Commissioner of Icelandic Police (NCIP) is in charge of analysing reports and partners with Barnaheill in running the hotline. The police investigate leads and forward them to Barnaheill who uploads data to the IHRMS database – both will cooperate with other INHOPE hotlines. The police will also forward leads to Europol and Interpol. The Icelandic Red Cross also runs the 1717 Helpline for people who need assistance because of grief, anxiety, distress, depression or suicidal thoughts. These can call the Red Cross helpline free of charge 24 hours a day. The phone line also has a crucial function during times of emergency. Any incident, including cyber-related ones, can be reported via the police emergency number 112 or directly to police districts. Also, incidents such as child abuse are referred from the Police to Europol and Interpol. Some participants noted that no formal communication links have been established between the police and CERT-IS on one hand and the private sector on the other hand. However, formal communication channels are present between the communications sector and CERTIS based on the Electronic Communications Act34. According to CERT-IS it would be the most logical hub of communications in coordinating flow of information about incidents between 32 www.barnaheill.is http://www.saft.is/wp-content/uploads/2013/10/SAFT_2013_annual_report_lowres.pdf 34 http://www.althingi.is/lagas/nuna/2003081.html (in Icelandic), https://eng.innanrikisraduneyti.is/laws-and-regulations/english/electronic-communications/ (English translation) 33 35 | Cybersecurity Capacity Review Iceland, 2017