[Chapter-delegates] ITU Speech: Governance Monday: Do We Need a Global Cybersecurity Framework

Sun Jul 21 17:39:25 PDT 2013

Jean-Robert, Gritory, Ammar, Carlos, Leon, Wyn:

1. glad to read you, esp. JR Hountomey's comment on the AF* evolving 
landscape and Wyn's description of the Philippines situation. Great examples of how things are actually happening.

2. cybersecurity can't be too different from the Internet in many aspects: 
it is not well defined, to begin with; it has to be decentralized and 
diverse; and it is a great cooperative effort;

3. on the efforts in Pakistan, hats off for managing to put together a 
CSIRT effort - it is not a small task;

4. on PK as well: the part I see missing is an active civil-society and 
academic component. It may be included in your mentions of "private 
sector", of course (the US and most of the rest of thw eorld differ in 
this usage as we all know; in the US "private sector" often refers to 
"everything outside government" whereas in many other countries it means 
the for-profit sector of the economy only.) There *are* (to the best of my 
knowledge) some very competent civil-society organizations which are doing 
a great and risky job of training journalists and citizens, in Pakistan 
and abroad in the region, for some subset of cybersecurity awareness and 
active competences. I know this may get us into political grounds which I 
don't want to explore without sufficient knowlege, but in so far as 
possible it may be deisrable to involve them as well.

This would be very much as I have been observing in the design for
resilience, in a recent read, where water and electrical power-generation 
organizations have a biologist/ecologist inside the control room to take 
part in decisions about actions like flood control, response to power 
demand and outages, etc.

That is the true meaning of multistakeholderism, by the way: not only the 
sharing of thought and perspectives, like the IGF, but actual (structured, 
effective) collaboration in decision making and therefore also in 
accountability for the results among all parties.

Yours,

Alejandro Pisanty

- - - - - - - - - - - - - - - - - - - - - - - - - - -
     Dr. Alejandro Pisanty
Facultad de Química UNAM
Av. Universidad 3000, 04510 Mexico DF Mexico

+52-1-5541444475 FROM ABROAD

+525541444475 DESDE MÉXICO SMS +525541444475
Blog: http://pisanty.blogspot.com
LinkedIn: http://www.linkedin.com/in/pisanty
Unete al grupo UNAM en LinkedIn, http://www.linkedin.com/e/gis/22285/4A106C0C8614
Twitter: http://twitter.com/apisanty
---->> Unete a ISOC Mexico, http://www.isoc.org
.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .

________________________________________
Desde: chapter-delegates-bounces at elists.isoc.org [chapter-delegates-bounces at elists.isoc.org] en nombre de hrobert at iservices.tg [hrobert at iservices.tg]
Enviado el: domingo, 21 de julio de 2013 17:55
Hasta: chapter-delegates at elists.isoc.org
Asunto: Re: [Chapter-delegates] ITU Speech: Governance Monday: Do We Need a Global Cybersecurity Framework

Ammar,

I would like to encourage your efforts. It is not an easy task.

May I ask your expectations ?

You have Great people in the ISOC Network happy to help and the ISOC
Community Fund is also something you can consider to fly people in for
events.

> a one-stop shop for cybersecurity is a dangerous illusion
+1

> The way to go forward is to find the sources you trust and build
> with the resources you can get; save the experience, spread, share,
> and build again. Send people to ISOC, to SANS, call on people with
> expertise from your local banks, universities, whatever sources of
> knowledge and trust you havelocally. TRUST YOURSELF and the deep
> truth of the Internet's decentralized multi-
> stakeholder ecology and you shall succeed.

+1
I will add that there are great teams and events in your region and I
am sure that if you call for help they will answer.

- APCERT
- APNIC
- APISC Security Training
- OIC-CERT (FYI Pakistan is Member of OIC-CERT)

The African Continent has taken this approach with several
stakeholders and our strength remains on the Af* (African
Organizations for Internet Governance).
Teams are flying from countries to countries (within the continent) to
help other teams to get organized and up to speed. The same model
exists in your region.

You can also approach FIRST (www.first.org).

Jean Robert Hountomey
ISOC TOGO

> Dear Dr Alejandro,
>
> Thanks for your prompt response. Since majority of stake holders in
> any country are from private sector so a Public-private partnership
> for cyber security initiatives are suitable plate forms.
>
> Cyber Security Task Force has been established in Pakistan to engage
> all relevant public & private sector stake holders and encourage
> them in all required initiatives supported/supervised by a team of
> professional experts of Cyber Security. We in PISA-CERT  are already
> in contact with number of global initiatives and now scale up our
> contribution as a cyber secure Pakistan. Pl see details at
> www.PISA.org.pk.
>
> I am former pioneering head of NR3C ( Govt initiative on Cyber
> Security ) and currently heading PISA Pakistan and Chairman Cyber
> Security Task Force. We have planned to Commemorate the year 2014 as
> year of “Cyber Secure Pakistan”.
>
> Regards,
>
> Ammar Jaffri
> _______________________________________________
> As an Internet Society Chapter Officer you are automatically subscribed
> to this list, which is regularly synchronized with the Internet Society
> Chapter Portal (AMS): https://portal.isoc.org

_______________________________________________
As an Internet Society Chapter Officer you are automatically subscribed
to this list, which is regularly synchronized with the Internet Society
Chapter Portal (AMS): https://portal.isoc.org