Details regarding its name, mission, vision, objectives, and detailed activities could be developed by the AUC in collaboration with African Internet community. 3.1.2 Engage in Capacity Building and Knowledge Sharing on a pan-African Level Capacity building and knowledge sharing are critical to securing Internet infrastructure in Africa. Stakeholders, be they individuals, governments, organizations or others, need to be equipped with the tools necessary to help ensure Internet infrastructure security while preserving economic and social prosperity. This includes current and usable information on threats and security techniques, along with how to implement them. Cyber security research and development in Africa should be improved to create more usable and current tools for African stakeholders. Because of the international nature of the Internet, information needs to be made available to all stakeholders, not only those within a national border. To achieve these goals, the AUC should create capacity building programs, based on needs assessments, to equip stakeholders with the skills needed to secure Internet infrastructure. These programs will spread state-of-the-art tools, techniques, and practices to other stakeholders through awareness-raising initiatives. The initiatives could take many forms including workshops, training courses, and conferences. All stakeholders should be considered in the needs assessment. Initiatives would be developed in a multi-step process. First, the ACS3C would identify capacity gaps in cyber security and advise the AUC on how to take action. The AU would develop programs based on the needs identified by ACS3C and implement them in collaboration with partner organizations. Possible partner organizations or institutions include CSIRTs, academic and research institutions, the Internet technical community, the private sector and civil society. By using an initiative-based approach to capacity building, the AU would be able to tailor its efforts to specific needs and environments within different African countries. Importantly, the initiatives would not be solely technical. Instead, they would provide capacity building in all areas of Internet infrastructure security, including economic and policy dimensions. Importantly, these initiatives will enable capacity building among stakeholders who may not have the resources to allocate towards similar initiatives of their own. The programs would also foster expert organizations that could continue to support capacity building in a particular topic, even after the original initiative is completed. 3.2 National Level Alongside the role national governments have in facilitating information sharing and promoting best practices, governments hold the unique position of legislator in the Internet infrastructure ecosystem. Therefore, governments should champion awareness and accountability. Governments have the ability to pass laws on Internet infrastructure security. It is important that the laws enacted by governments adhere to the four essential principles of awareness, responsibility, cooperation, and fundamental rights and Internet properties. It is also important that the application and potential impact of new laws are carefully considered before they are enacted. Ratifying and applying the Convention is a strong first step towards creating an African legal context in which a healthy Internet infrastructure security ecosystem could develop. Further, governments should consider using other tools they have available such as the ability to offer economic incentives, driving change through procurement, encouraging industry to self-regulate, and empowering citizens to demand better security solutions. Sometimes these solutions can be more effective than laws. 3.2.1 Identify and Protect Critical Internet Infrastructure Identifying critical Internet infrastructure is as important as fostering actions for their security. Misclassifying critical Internet infrastructure can undermine other aspects of critical Internet infrastructure protection (CIIP). Misclassified critical Internet infrastructure does not benefit from 16 Internet Infrastructure Security Guidelines for Africa internetsociety.org

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents