GOAL THREE: Addressing Cybercrime NEW ZEALAND IMPROVES ITS ABILITY TO PREVENT, INVESTIGATE AND RESPOND TO CYBERCRIME Cybercrime ranges from harmful digital communications of a criminal nature (cyberbullying), to state-sponsored theft of intellectual property. Given the broad scope of cybercrime and the range of organisations engaged, this particular goal is outlined in a separate, more detailed National Plan to Address Cybercrime. This Plan sets out the cybercrime problem and the challenges it poses. It outlines a range of actions to prevent cybercrime and reduce the harm to New Zealanders. Prevention first is at the heart of the approach to cybercrime – giving New Zealanders the tools to change their online behaviour. This approach intersects closely with the Cyber Capability goal of the Strategy, particularly through investment in Connect Smart. Lifting the government’s capability to deal with cybercrime is a key priority. As new technologies emerge, new skills are required for cybercrime investigation and prosecution, including digital forensics and the ability to secure electronic evidence. Some of this is already underway as agencies work together to share tools and techniques. It is also critical that New Zealand’s legal framework remains fit for purpose, adapting to rapidly evolving technologies and the challenges posed by crimes across multiple jurisdictions. The Harmful Digital Communications Act 2015 is a recent development (addressing cyberbullying) and a review of the Privacy Act 1993 is underway. As the threat picture evolves, other questions will need to be considered. These may include considering giving Police the tools to address botnets; widening enforcement powers to include seeking information on care and protection matters; and the role of the Internet in funding or supporting organised criminal or terrorist groups. Reflecting the overlapping risks across the cyber-security continuum, we need a coordinated and accessible operational response to cybercrime. This goal will intersect with the Cyber Resilience goal, particularly the proposal for a threat analysis tool and the establishment of a CERT. International cooperation is essential. Most cybercrimes originate outside New Zealand’s borders. Successful investigation and prosecution requires interaction between law enforcement agencies from different countries. Building trust and cooperation, and sharing best practice, between the law enforcement agencies of different jurisdictions helps to ensure that the rule of law is also effective in cyberspace. This requires continued work with key partners, such as efforts to support cyber capacity building activities in the Asia-Pacific region. A further step involves progressing New Zealand’s accession to the Council of Europe Convention on Cybercrime. The Convention is the first international treaty to address cybercrime by promoting harmonised legal frameworks, improving investigative techniques and increasing cross-border cooperation. 8 New Zealand’s Cyber Security Strategy Action Plan 2015