4. Priority Areas 4.1 Implementation of dynamic responses to cyber incidents In implementing the risk-based approach premised on the possibility of cyber incidents, response needs to be prompt and global, and must minimize the impact of the incident while addressing the ever-changing risks. As cyber threats are real threats, building a mechanism for international cooperation and partnership is an urgent task. Such mechanism would facilitate quick identification of a cyber incident, accurate analysis of its impact, and global dynamic response to the incident such as prevention of further damage, facilitation of early resolution, research on its causes and prevention of similar incidents. 4.1.1 Enhancing multi-layered mechanism for information sharing In order to establish a mechanism which can dynamically respond to global cyber incidents, there also needs to be a mechanism for global information-sharing which enables responses based on international information and sharing of countermeasures. Having a wide range of information sources facilitates quick and accurate judgments on the rapidly-changing situations, given that diverse entities are involved in cyberspace with their own security measures. Thus, it is meaningful to build an information-sharing mechanism that is multi-layered, consisting of multiple layers including technology, law enforcement, policy and diplomacy. In particular, it is important to forge cooperation among Computer Security Incident Response Teams (CSIRTs), which are responsible for operational responses, such as detecting cyber incidents, analyzing malwares and IP addresses and taking actual responses; cooperation among law enforcement agencies which exercise investigative authorities and are responsible for preventing further damage; cooperation at the policy level which would facilitate quick understanding of the overall picture of an incident and necessary policy responses; information-sharing at the diplomatic level to avoid unexpected escalation into potential conflict; and cooperation among researchers engaged in research and development on leading-edge technology. Japan will actively work toward establishing a multi-layered global mechanism for information-sharing and will enhance its preparedness for the event of cyber incident. 4.1.2 Appropriate response to cybercrime International cooperation needs to be strengthened in order to effectively deal with cybercrime which easily transcends national borders. Japan will continue to exchange information on cybercrime and digital forensics with foreign law enforcement agencies through forums such as the G8 Rome-Lyon Group High-Tech Crime Subgroup and the Counter-cybercrime Technology Investigation Symposium (CTINS). Japan will also dispatch personnel overseas in order to exchange information on the latest cybercrime investigative techniques and to strengthen cooperation with overseas investigation agencies and will actively request mutual legal 4