[Infowarrior] - Painter: The Case for Diplomacy in Cyberspace

[Richard Forno]

Chris Painter
Cyber guy for 27 yrs, tech, wine, film, Pynchon & indie music fan.
Aug 1
The Case for Diplomacy in Cyberspace

https://medium.com/@C_Painter/the-case-for-diplomacy-in-cyberspace-8ca1ca8c97b3

For the last six and a half amazing years I have had the honor to serve as the first Coordinator for Cyber Issues in the Secretary’s Office at the State Department. I am tremendously proud of what we have accomplished during my time as America’s top cyber diplomat, and prouder still of one of the most talented, creative and dedicated teams in government — or for that matter anywhere. My office literally created and advanced a whole new area of foreign policy focus that simply didn’t exist before. As both cyber threats and opportunities have continued to grow, so too have the range of cyber issues — including everything from Internet Freedom and Governance to combatting cybercrime, fostering cybersecurity and advancing international security and stability in cyberspace. These important matters have evolved from being seen as largely niche or technical issues, to core issues of national security, economic security, human rights and, ultimately, core issues of foreign policy.

When then Secretary Clinton created our office, we were the first of our kind in the world. Today, there are over twenty such offices, and growing, in foreign ministries around the globe — a testament to the growing importance of these issues as a foreign policy imperative. We’ve also established other precedents for the international community. For example, we pioneered “whole of government” dialogues with global partners to ensure that we were leveraging all of the capabilities of our governments on these cross-cutting issues, that now are the model for engagement between many countries. More importantly, we made concrete progress, working with other countries and partners, to ensure we maintain an open, interoperable, reliable and secure cyberspace for the future, while responding to growing threats posed by nation states, criminal groups, terrorists and others.

We worked with like-minded governments to cooperate and use diplomatic tools to address world-wide cyber threats. We reached a landmark agreement with China that made clear that no state should use cyber means to steal the intellectual property and trade secrets of another to benefit its commercial sector that has been widely adopted by other countries. We led the international discussion and provided the thought leadership in promoting a framework of cyber stability to address the growing threats in cyberspace particularly as states develop new cyber capabilities. As part of that framework, we achieved a historic consensus that international law that applies in the physical world also applies in cyberspace; we articulated and advanced a number of norms of state behavior (voluntary rules of the road), and promoted cyber confidence building and transparency measures to avoid miscalculation and conflict escalation. This framework is the foundation of a more robust deterrence strategy in cyberspace that we are now developing and advancing. That strategy looks to builds a flexible coalition of likeminded countries who can respond to bad actors, using all the tools in our tool kit and some we haven’t even thought of yet. Inevitably, whether in the physical or cyber world, bad actors will violate norms and international law, but acceptance of those basic precepts allow the good guys to act together to ensure a safe and secure global Internet. We simply need to be more agile and timely in addressing and responding to the significant threats we face or we risk setting the norm that these pernicious actions are acceptable.

We joined with our human rights colleagues at State to help advance and protect Internet Freedom and make sure that promotion of these values were woven into our security work and engagements with other countries. We worked with our Department of Justice colleagues to get more countries to adopt the Budapest cyber crime convention and increase international cooperation and capacity among law enforcement professionals. We labored with our colleagues in the Department of Homeland Security and others to create and implement an ambitious capacity building initiative so that countries have the strategies and ability to help protect themselves and, given the global nature of cyber threats, cooperate to protect us. And, we worked with colleagues across the government, the private sector and civil society, to thwart continued attempts by repressive regimes to impose state control over the Internet and undermine its multi-stakeholder foundation.

While we have accomplished much, we are still at the beginning of this journey and there is a long road ahead. Indeed, I believe we are at an inflection point, where the work we do now and the choices we make will determine whether we can all continue to benefit from this amazing technology, or whether both growing policy and technical threats will undermine its incredible potential. Achieving the future we want will require continued high-level attention and a significant and sustained effort. Diplomacy has and must continue to play a pivotal role — shaping the environment, building cooperation, and working to build coalitions to respond to shared threats, and we must continue to lead the international community. This is not some legacy Cold War issue but the quintessential 21st century issue of our national security — involving aspects of human rights, security and economic policy — requiring high- level leadership and a matrixed 21st century response that leverages all of our capabilities.