• Department of the Prime Minister and Cabinet: the National Cyber Policy Office, Connect Smart. • Ministry of Justice: criminal justice policy development. • National Cyber Security Centre (in the Government Communications Security Bureau): advanced threats against New Zealand’s information infrastructures of national importance. • New Zealand Customs Service: border protection. • New Zealand Security Intelligence Service: investigation of state-sponsored espionage, either directed against or involving New Zealand, with emphasis on detection and investigation of threats. • Serious Fraud Office: serious or complex frauds. However, cybercrime is a shared problem – non-governmental organisations (NGOs), civil society and the private sector all have a role to play in both prevention and response. NetSafe12 and the New Zealand Internet Taskforce,13 for example, provide a reporting point and incident advisories – and have taken on roles not currently provided by government. Twenty-three percent of all the reports NetSafe received in 2014 were directly referred from the New Zealand Police.14 Protect yourself online The New Zealand government has also initiated Connect Smart:15 a partnership with a range of organisations to raise awareness and capability. Many private sector companies provide a response to cybercrime as a part of their core customer service – managing cybercrime is a part of doing business in the 21st century – and build a range of protections into the services they offer. Responsibility also sits with the wider community. The New Zealand Police’s operating strategy is Prevention First, an approach which is also relevant to cybercrime.16 Ideally, cybercrime will be prevented before it occurs. While there is no way to totally eliminate the risk, there are simple steps every individual can take to reduce risk. New Zealanders need to take cyber security threats seriously and be equipped with the tools and techniques to protect themselves online. To reduce the number of cybercrime victims in New Zealand, we need to raise awareness in a way that creates behavioural change. Research commissioned as part of Connect Smart Week 2014 showed that, of the 83% of New Zealanders who had experienced a cyber-security breach, 61% had not changed their online behaviour since the breach.17 The research also suggested that New Zealanders find the topic overwhelming, meaning there is a role for government, in partnership with the private sector and NGOs, to be a trusted source of information and advice. Accordingly, there are opportunities for the government to improve the experience for victims of cybercrime, while also gaining a better understanding of the issue. A joined-up approach will be critical to provide an effective, customer-focused response to cybercrime. Confidence in the security and use of ICT will also be critical to achieve the government’s objectives in delivering services to citizens via online channels. 12 http://www.theorb.org.nz 13 http://www.nzitf.org.nz 14 Figure from NetSafe. 15 www.connectsmart.govt.nz 16 Police NIC, 2014. 17 Connect Smart, 2014. National Plan to Address Cybercrime 2015 7