Just in case someone else is interested in US's position on ITU/Cybersecurity (and Internet) at PP-10, Amb. Verveer's policy statement made it pretty clear.<div><br></div><div><span class="Apple-style-span" style="font-family: Verdana; border-collapse: collapse; "><span class="Apple-style-span" style="font-size: x-small; ">"...</span></span></div>
<div><span class="Apple-style-span" style="font-family: Verdana; border-collapse: collapse; "><span class="Apple-style-span" style="font-size: x-small; ">Much of the effort here in Guadalajara should be devoted to seeking ways to enhance the ITU’s excellent contributions to efficient and widely developed telecommunications services and infrastructure—to improving things that it does best: harmonizing radio frequency allocations, developing and disseminating best practices, and contributing to capacity building.</span><p style="font-size: medium; ">
<span class="style10" style="font-size: x-small; ">The United States has identified three matters that warrant special mention in this regard.</span></p><p style="font-size: medium; "><span class="style10" style="font-size: x-small; ">First, the ITU should be a place where the development of the Internet is fostered. The Internet has progressed and evolved in a remarkably successful way under the existing multi-stakeholder arrangements. Changes, especially changes involving inter-governmental controls, are likely to impair the dynamism of the Internet—something we all have an interest in avoiding.</span></p>
<p style="font-size: medium; "><span class="style10" style="font-size: x-small; ">Second, the ITU’s interest in cybersecurity should continue to focus on capacity building and the associated development and dissemination of best practices. This is an area where an enormous amount remains to be done, and where improvements will prove very valuable to all ITU members, regardless of the state of their digital development. We believe very strongly that the ITU should not be distracted from this important responsibility by straying into areas outside of its mandate and expertise such as cybercrime and cyberwar.</span></p>
<p style="font-size: medium; "><span class="style10" style="font-size: x-small; ">Third, looking forward to the 2012 World Conference on International Telecommunications, it would be a serious mistake to seek to extend the International Telecommunications Regulations to today’s world of broadband and the Internet. There is a superficial similarity between the narrowband for which the ITRs were configured and the broadband of today, but it is only superficial. Just as with the Internet, inter-governmental controls over broadband are likely to do much more harm than good."</span></p>
</span><div><a href="http://www.itu.int/plenipotentiary/2010/statements/usa/verveer.html">http://www.itu.int/plenipotentiary/2010/statements/usa/verveer.html</a></div><div><br></div><div>Abraços,</div><div>Sérgio</div><div>
<br></div><div><br><br><div class="gmail_quote">2011/2/18 Sergio Alves Junior <span dir="ltr"><<a href="mailto:sergioalvesjunior@gmail.com">sergioalvesjunior@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Sala,<div>I've sent it to your email.</div><div><br></div><div>Abraços,</div><div>Sérgio<br><br><div class="gmail_quote"><div class="im">2011/2/18 Salanieta T. Tamanikaiwaimaro <span dir="ltr"><<a href="mailto:salanieta.tamanikaiwaimaro@gmail.com" target="_blank">salanieta.tamanikaiwaimaro@gmail.com</a>></span><br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Sergio,</div><div><div></div><div class="h5">
<div> </div>
<div>May I please also get a copy of PP-10’s Brazilian delegation report (em português), where I tried to collect the voices of various Member States interested in the ITU Cybersecurity debate?</div>
<div> </div>
<div>Kind Regards,</div>
<div> </div>
<div>Sala<br><br></div><div><div></div><div>
<div class="gmail_quote">On Fri, Feb 18, 2011 at 4:18 PM, Sergio Alves Junior <span dir="ltr"><<a href="mailto:sergioalvesjunior@gmail.com" target="_blank">sergioalvesjunior@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:#ccc 1px solid">
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">Hi, Katitza,</span></p>
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">There are no new ITU Resolutions on Cybercrime in 2011. I can only think of PP-10's, which entered into force this year.</span></p>
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">At PP-10, in October, negotiations among US, Brazil, UK, Sweeden, EU, China, Syria, Iran, UAE, regarding Cybersecurity were intense, but US' position was to block any effective ITU mandate on it. At the end, Resolution 130 (on the role of ITU) was revised and a new Res. 181 (on a Cybersecurity definition) was approved:</span></p>
<p style="margin:0cm 0cm 0pt;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">- (Revised) Res 130 ("Strengthening the role of ITU in building confidence and security in the use of ICTs"), originally from PP-02 and PP-06. It basically states that ITU’s no mandate do not include areas related to Member States' application of legal or policy principles related to national defense, national security, content and cybercrime. In these sensitive matters, ITU's mandate is to foster cooperation, share best practices, support the establishment of CIRTs. By the way, Brazil successfully managed to delete every mention to EC Budapest Convention on both Res.130 and 181.</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">- (New) Res 181 ("Definition and terminology relating to building confidence and security in the use of ICTs) is an effort to make official an ITU-T's definition on "Cybersecurity" (Recommendation X.1205), but it was not fully agreed, as it was developed under a specific technical sphere (ITU’s SG 17: Security). It was accep</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin:0cm 0cm 0pt 2cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">"<i>Cybersecurity: Cybersecurity is the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organization and user’s assets. Organization and user’s assets include connected computing devices, personnel, infrastructure, applications, services, telecommunications systems, and the totality of transmitted and/or stored information in the cyber environment.<span> </span>Cybersecurity strives to ensure the attainment and maintenance of the security properties of the organization and user’s assets against relevant security risks in the cyber environment. The general security objectives comprise the following:</i></span></p>
<p style="margin:0cm 0cm 0pt 1cm;text-indent:0cm"><i><span lang="EN-US" style="font-size:12pt"><span> </span>•<span> </span>Availability</span></i></p>
<p style="margin:0cm 0cm 0pt 1cm;text-indent:0cm"><i><span lang="EN-US" style="font-size:12pt"><span> </span>•<span> </span>Integrity, which may include authenticity and non-repudiation</span></i></p>
<p class="MsoNormal" style="margin-top:0cm;text-indent:1cm"><i><span lang="EN-US"><span> </span>•<span> </span>Confidentiality</span></i><span lang="EN-US">"</span></p>
<p class="MsoNormal" style="margin-top:0cm;text-indent:1cm"><span lang="EN-US"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">In sum, Res. 130 and 181, which were of great interest to US, are not on Cybercrime, they are on not-Cybercrime. Furthermore, it is not a US propos</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">If you want, I can send you part of PP-10’s Brazilian delegation report (em português), where I tried to collect the voices of various Member States interested in the ITU Cybersecurity debate.</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt"> </span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">Abraços,</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">Sérgio</span></p>
<p style="margin-top:0cm;text-indent:0cm"><span lang="EN-US" style="font-size:12pt">Brazil</span></p><br>
<div class="gmail_quote">2011/2/17 Katitza Rodriguez <span dir="ltr"><<a href="mailto:katitza@eff.org" target="_blank">katitza@eff.org</a>></span>
<div>
<div></div>
<div><br>
<blockquote class="gmail_quote" style="padding-left:1ex;margin:0px 0px 0px 0.8ex;border-left:#ccc 1px solid">Greetings,<br><br>Yesterday, Secretary Hillary Clinton mentioned in her speech that the U.S has led the effort to get multiple resolutions passed at the United Nations, including one this year. Is anyone familiar with this resolution, and which part of the UN she is referring to? ITU? I would appreciate any information you may have,<br>
<br>All the best, Katitza<br>____________________________________________________________<br>You received this message as a subscriber on the list:<br> <a href="mailto:governance@lists.cpsr.org" target="_blank">governance@lists.cpsr.org</a><br>
To be removed from the list, visit:<br> <a href="http://www.igcaucus.org/unsubscribing" target="_blank">http://www.igcaucus.org/unsubscribing</a><br><br>For all other list information and functions, see:<br> <a href="http://lists.cpsr.org/lists/info/governance" target="_blank">http://lists.cpsr.org/lists/info/governance</a><br>
To edit your profile and to find the IGC's charter, see:<br> <a href="http://www.igcaucus.org/" target="_blank">http://www.igcaucus.org/</a><br><br>Translate this email: <a href="http://translate.google.com/translate_t" target="_blank">http://translate.google.com/translate_t</a><br>
<br></blockquote></div></div></div><br><br>____________________________________________________________<br>You received this message as a subscriber on the list:<br> <a href="mailto:governance@lists.cpsr.org" target="_blank">governance@lists.cpsr.org</a><br>
To be removed from the list, visit:<br> <a href="http://www.igcaucus.org/unsubscribing" target="_blank">http://www.igcaucus.org/unsubscribing</a><br><br>For all other list information and functions, see:<br> <a href="http://lists.cpsr.org/lists/info/governance" target="_blank">http://lists.cpsr.org/lists/info/governance</a><br>
To edit your profile and to find the IGC's charter, see:<br> <a href="http://www.igcaucus.org/" target="_blank">http://www.igcaucus.org/</a><br><br>Translate this email: <a href="http://translate.google.com/translate_t" target="_blank">http://translate.google.com/translate_t</a><br>
<br><br></blockquote></div><br>
</div></div></div></div></blockquote></div><br></div>
</blockquote></div><br></div></div>