is, therefore, important that these organizations are aware of the impacts of their actions (or inaction) on the security of others. A clear and implemented security policy based on recurring risk assessment and underpinned by organizational commitment should contain, at the minimum, several specific action items. These include: applying basic essential measures for a healthy network; demonstrating an adequate system of controls; having a formalized process and capability to respond to cyber incidents; conducting regular exercises; establishing a disclosure process; and ensuring established relationships with other stakeholders, such as government officials and CSIRT teams. National governments, and other stakeholders, should empower organizations and institutions to create a culture of cyber security for economic and social prosperity through information sharing, promoting best practices, and leading by example. The necessary organizational structure should be put in place in institutions that are responsible for cyber security initiatives and activities. Organizations and institutions should implement current best practices and develop a culture of cyber security at the operational, as well as the executive level. 3.5 Global Cooperation Cyber security threats are global in nature and constantly growing. Adopting technical solutions for prevention, detection, mitigation and recovery is one way to respond to these evolving threats. However, these technological measures have to be accompanied by cross-border collaboration to be effective. Digital boundaries do not coincide with national frontiers, making global collaboration an essential part of the response mechanism. Furthermore, the propagation and implications of threats, such as malware, illustrate that they are no longer an issue for organizations to deal with alone, but are increasingly the responsibility of all stakeholders. Therefore, the cross-border nature of threats makes it essential to focus on strong international cooperation. This requires major efforts at the national, African, and global level. There needs to be close cooperation with global partners to prevent and to respond to cyber incidents. While formal communication can be helpful, informal trusted communication methods allow for faster responses to threats, closer ties between stakeholders, and stronger cooperation and collaboration. Developing multiple trusted channels for communication ensures better cooperation and information sharing. Organizations, such as CSIRTs or network operator groups (NOGs), provide good avenues for collaboration. Organizations or networks can be formed geographically or concerning a specific topic or sector. Relationships between network operators, often developed in NOGs, allow for improved security. For example, when spam originates from a network with which there is a relationship, the impacted network operator can inform the operator of the origin network. As that operator is closer to the source of the spam, they are more likely to be able to solve the problem. The importance of the international dimension of cyber security and the need for better alliances and partnerships with like-minded countries or allies, including capacity building, should not be overlooked. 20 Internet Infrastructure Security Guidelines for Africa internetsociety.org