How Can Global Cooperation Counter Cybercrime?

TL;DR

Effective cybersecurity requires proactive detection, rapid response, attack attribution, and trusted cooperation across countries, industries, governments, companies, and communities. Because cybercriminals operate through flexible international networks and exploit weaker organizations, stakeholders must share intelligence, strengthen capabilities, develop skilled professionals, and use international institutions to coordinate research, training, investigation, and operational support.

Transcript

ASEAN senior officials, distinguished guests, ladies and gentlemen, good morning. I'm glad to join all of you here at the opening of the inaugural RSA Conference Asia Pacific in Singapore. Amongst us are ASEAN senior officials, representatives from the industry, government agencies, and academia. This is the first time we have gathered so many publ... Read More

Key Insights

• Cybercrime is a global phenomenon because connected networks allow attacks in one part of the world to affect other countries. Effective responses therefore depend on international networks that exchange data and expertise quickly enough to identify, mitigate, investigate, and attribute threats.
• Cybercriminal networks are elastic structures that can change organically and operate from different locations to avoid investigation and prosecution. Their rapid adoption of new technologies produces an evolving threat landscape that makes repeated reliance on familiar tactics increasingly predictable, fragile, and ineffective.
• Prevention alone is impractical when more than 150,000 viruses and other forms of malicious code are circulating. Security stakeholders must complement preventive controls with capabilities that detect attacks, cripple their operations, trace them to their sources, and enable effective investigation and prosecution.
• Industry cooperation is essential because companies face common threats even while competing commercially. Networks that distribute real-time alerts about harmful activity can help participating organizations recognize emerging attacks earlier and strengthen collective detection without eliminating the need for individual competitiveness.
• Public-private-people collaboration is necessary because governments protect national interests, commercial entities own many telecommunications networks, computers, and software, and much attack information resides outside government. Combining these perspectives helps address the limitations and blind spots present within each sector.
• Trust and shared ownership are critical foundations for successful cross-sector cybersecurity partnerships. Non-disclosure agreements can reduce barriers to cooperation and create confidence for sharing intelligence, vulnerabilities, and solutions, as illustrated in the speech by the nonprofit organization InfraGard.
• Existing international institutions are valuable coordination platforms for global stakeholders. The planned Interpol Global Complex for Innovation in Singapore was presented as a place to share perspectives, jointly research emerging threats, develop tailored solutions, and support coordinated international cybersecurity efforts.
• Cybersecurity resilience is limited by the weakest link because criminals may target smaller companies after larger organizations improve their defenses. Capacity building and training for less-protected counterparts can therefore reduce indirect access routes into larger corporations during mergers or acquisitions.

Questions & Answers

Q: Why does effective cybersecurity require international cooperation?

Effective cybersecurity requires international cooperation because cyberattacks can cross national boundaries through globally connected networks, while criminal groups can shift among operating locations to avoid investigation and prosecution. Countries must exchange data and expertise proactively so threats can be identified, mitigated, attributed, and investigated quickly. Global collaborative networks also help stakeholders coordinate policies, research, training, and operational responses against a shared problem.

Q: Why are traditional responses insufficient against evolving cyber threats?

Traditional responses are insufficient because cybercriminals rapidly exploit new technologies and reorganize their operating networks to avoid authorities. Repeatedly rehearsing the same tactics and strategies can make defenders predictable and fragile in an uncertain environment. The growing dependence on mobile devices, computers, and global networks also increases the potential impact of breaches, requiring continuous innovation, vigilance, detection, reaction, and adaptation.

Q: What cybersecurity measures are needed beyond prevention?

Cybersecurity programs need measures that detect attacks, cripple malicious operations, attribute activity to its source, and support investigation and prosecution. Prevention alone was described as impractical given the circulation of more than 150,000 viruses and other types of malicious code. A proactive strategy must therefore combine preventive safeguards with early detection, rapid response, technical analysis, intelligence sharing, and effective law-enforcement action.

Q: How can companies cooperate while remaining competitive?

Companies can remain commercially competitive while building industry networks that address threats shared across the private sector. One proposed approach is a real-time alert system that warns participating organizations about harmful activity, improving their ability to recognize attacks early. Cooperation provides collective security benefits because a threat detected by one organization can become useful intelligence for other partners facing similar risks.

Q: Why is public-private-people collaboration important for cybersecurity?

Public-private-people collaboration is important because cybersecurity responsibilities, infrastructure, information, and expertise are distributed across society. Governments set national direction and protect national interests, while commercial entities own many telecommunications networks, computers, and software. Companies and communities also hold much of the information about attacks and financial consequences. Collaboration combines these strengths while reducing each sector's limitations and blind spots.

Q: How can cybersecurity partnerships build trust between sectors?

Cybersecurity partnerships can build trust through shared ownership and formal arrangements that protect sensitive information. Non-disclosure agreements were identified as one way to remove barriers and create an architecture of confidence among government, commercial, and community participants. The speech cites InfraGard as an example of a nonprofit organization promoting trusted exchanges of intelligence, vulnerabilities, and solutions through mutual agreements across these sectors.

Q: How can international institutions strengthen cybercrime responses?

International institutions can provide shared platforms where global stakeholders coordinate their efforts, exchange perspectives, and jointly research emerging threats and challenges. The upcoming Interpol Global Complex for Innovation in Singapore was presented as one such platform. Working through these institutions can help participants act together, create solutions suited to their individual security needs, encourage technology innovation, and provide training and operational support.

Q: Why should cybersecurity programs support smaller companies?

Cybersecurity programs should support smaller companies because overall resilience is only as strong as the weakest link. As larger companies strengthen their defenses, criminals may redirect attacks toward smaller organizations. Those organizations can later become access routes into larger corporations when they merge or are acquired. Capacity building and training across organizations therefore protect both individual participants and the wider interconnected business environment.

Summary & Key Takeaways

• Global connectivity allows cyberattacks and criminal activity originating in one location to affect other countries. Cybercriminals use flexible networks, changing operating locations, emerging technologies, virtual currencies, computers, and mobile devices to avoid prosecution and cause harm. Past defensive responses cannot remain effective against an evolving and increasingly uncertain threat landscape.

• Cybersecurity efforts should combine international cooperation, industry networks, public-private-people collaboration, and established international institutions. Countries need to exchange data and expertise proactively, while companies can use real-time alerts to warn partners. Trusted agreements can support intelligence sharing among organizations holding different information, capabilities, responsibilities, and operational perspectives.

• Long-term resilience depends on innovation, workforce development, training, and assistance for weaker organizations. Smaller companies can provide indirect routes into larger corporations after mergers or acquisitions. Singapore planned to develop 2,500 analytics professionals over five years and establish a cybersecurity laboratory supporting prevention, detection, and reaction training.