Details regarding its name, mission, vision, objectives, and detailed activities could be developed
by the AUC in collaboration with African Internet community.
3.1.2
Engage in Capacity Building and Knowledge Sharing on a pan-African Level
Capacity building and knowledge sharing are critical to securing Internet infrastructure in Africa.
Stakeholders, be they individuals, governments, organizations or others, need to be equipped
with the tools necessary to help ensure Internet infrastructure security while preserving
economic and social prosperity. This includes current and usable information on threats
and security techniques, along with how to implement them. Cyber security research and
development in Africa should be improved to create more usable and current tools for African
stakeholders. Because of the international nature of the Internet, information needs to be made
available to all stakeholders, not only those within a national border.
To achieve these goals, the AUC should create capacity building programs, based on needs
assessments, to equip stakeholders with the skills needed to secure Internet infrastructure.
These programs will spread state-of-the-art tools, techniques, and practices to other
stakeholders through awareness-raising initiatives. The initiatives could take many forms
including workshops, training courses, and conferences. All stakeholders should be considered in
the needs assessment.
Initiatives would be developed in a multi-step process. First, the ACS3C would identify capacity
gaps in cyber security and advise the AUC on how to take action. The AU would develop
programs based on the needs identified by ACS3C and implement them in collaboration with
partner organizations. Possible partner organizations or institutions include CSIRTs, academic
and research institutions, the Internet technical community, the private sector and civil society.
By using an initiative-based approach to capacity building, the AU would be able to tailor its
efforts to specific needs and environments within different African countries. Importantly, the
initiatives would not be solely technical. Instead, they would provide capacity building in all
areas of Internet infrastructure security, including economic and policy dimensions. Importantly,
these initiatives will enable capacity building among stakeholders who may not have the
resources to allocate towards similar initiatives of their own. The programs would also foster
expert organizations that could continue to support capacity building in a particular topic, even
after the original initiative is completed.
3.2 National Level
Alongside the role national governments have in facilitating information sharing and promoting
best practices, governments hold the unique position of legislator in the Internet infrastructure
ecosystem. Therefore, governments should champion awareness and accountability.
Governments have the ability to pass laws on Internet infrastructure security. It is important
that the laws enacted by governments adhere to the four essential principles of awareness,
responsibility, cooperation, and fundamental rights and Internet properties. It is also important
that the application and potential impact of new laws are carefully considered before they are
enacted. Ratifying and applying the Convention is a strong first step towards creating an African
legal context in which a healthy Internet infrastructure security ecosystem could develop.
Further, governments should consider using other tools they have available such as the ability
to offer economic incentives, driving change through procurement, encouraging industry to
self-regulate, and empowering citizens to demand better security solutions. Sometimes these
solutions can be more effective than laws.
3.2.1
Identify and Protect Critical Internet Infrastructure
Identifying critical Internet infrastructure is as important as fostering actions for their security.
Misclassifying critical Internet infrastructure can undermine other aspects of critical Internet
infrastructure protection (CIIP). Misclassified critical Internet infrastructure does not benefit from
16
Internet Infrastructure Security Guidelines for Africa
internetsociety.org
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents