US Ambassador at 7th Annual Summit on Cyber and Network Security

U.S. Ambassador Richard R. Verma’s Remarks at ASSOCHAM’s 7th Annual Summit on Cyber and Network Security - Ashok Hotel, New Delhi | August 26, 2015 (As Prepared for Delivery):

Good morning and thanks for the generous introduction. I’m delighted to be here and thank ASSOCHAM for the chance to speak to you on this important topic. Of course, the Internet today is part of just about everything we do. This digital age has opened countless windows of opportunity, to the great benefit of the U.S. and India. Both our societies and our economies have been enriched by the many advantages of greater connectivity; and I know this first hand, since I continue to marvel and how instantly connected I have felt to Indians of all ages since I have started my Twitter account. In fact just two weeks ago I visited Twitter’s India headquarters and took part in an online chat with a number of tech savvy Indians.

When we talk about digital technology, it is natural to think about potential risks, but it is the possibilities that should motivate us. From the campuses of Silicon Valley to the tech parks of Bangalore, our countries have emerged as leaders in the field of IT development. The Indian diaspora has played a particularly large role. Just two weeks ago Sundar Pichai, a native of Chennai, was named CEO of Google, one of America’s tech giants. He is one of countless similar examples. Indeed, when Prime Minister Modi visits California next month, he will be welcomed by a vibrant Indian-American community which, over the last two decades, has helped to transform the high-technology sector.

Similarly, here in India, technology has been integral in powering economic growth, whether it be through e-commerce, IT services, or product development. The Prime Minister’s “Digital India” initiative highlights India’s commitment to enhancing digital capacity, across a variety of sectors, bridging the divide between urban and rural communities. Secretary John Kerry also recently launched a new initiative to increase internet connectivity, in partnership with government, development banks, engineers, and industry leaders. I applaud these efforts, as broadening the reach of the Internet is a powerful way to promote global development. Every time a country increases its internet penetration by ten percent, its total economic growth can expand by up to two percent.

The Internet is part of the critical infrastructure that we have come to depend on. We use it in so many ways – as a communication tool, a marketplace, a forum for expressing new ideas. Digital technology promotes transparency and helps to hold governments accountable. It is a means to fight against repression, and protect human dignity. Yet we must ensure that cybersecurity tools are not inappropriately used to undermine these important benefits.

But, as transformative as the Internet is, there are risks. And the more reliant we become on the Internet, the greater those risks become. This means we need sound policies to protect this essential resource, as it is vital to advancing human progress in the 21st century. Therefore, promoting an open, secure, and reliable Internet is a key component of our economic policy.

Protecting the Internet cannot be the task of just one country, however, and requires cooperation between government, industry, academia, and every user. It is a shared resource, and thus its stewardship is a shared responsibility. The Internet has flourished because of the bottom-up, consensus-based process that allows multiple stakeholders to participate in its governance. Likewise, all stakeholders have a critical role in cybersecurity and cybercrime as well. The multistakeholder approach reaches beyond government and includes the private sector, civil society, academic institutions, and all internet users. Multistakeholder Internet governance has served us well thus far, and it is critical to broaden this approach to other areas of cyber policy because all institutions and users share a responsibility to keep the internet operating in a safe, secure, and reliable manner.

To that end, India’s recent decision to support the multistakeholder approach to internet governance is not only a win for India’s people, but an example of India’s ever-expanding role as a democratic world leader. We look forward to working closely with India and other partners to preserve the multistakeholder model, wherever it is challenged.

Of course, there are other, serious threats to the internet. As recent headlines have shown, cyber-attacks are a real and persistent concern. Internet misconduct has resulted in billions of dollars in economic damage. Criminal networks misuse the Internet to steal information and profit at the expense of private citizens, businesses, and governments. Extremist groups see it as a means to disseminate violent extremist propaganda and mislead youth into joining their causes. It is in our shared interest to seek collaborative solutions to these challenges.

We believe that the best defense is to promote what we call “international cyber stability.” This means we are seeking broad consensus on what constitutes responsible behavior in cyberspace. Our goal is to create a climate in which people everywhere are able to enjoy the benefits of the digital world. There is general consensus that the basic rules of international law apply in cyberspace, but there are a number of additional principles that should underpin countries’ behavior in cyberspace.

First, we posit that no country should support or conduct online activity that intentionally damages or impedes another country’s use.

Second, no country should seek to prevent emergency teams from responding to a security breach, or allow its own teams to cause harm.

Third, no country should engage in cyber-enabled theft of intellectual property, trade secrets, or other confidential information for commercial gain.

Fourth, every country should confront malicious cyber activity emanating from its soil. This includes the activities of extremist groups who seek to engage in criminal and terrorist behavior.

And finally, every country should do what it can to help states that are the victims of a cyber-attack.

Agreeing to and abiding by these principles would move us a long way towards ensuring a more secure cyberspace. In order to get there, however, we must work to improve our own and our partners’ capacity to protect against cyber threats. This includes a preventative component – through strong legal frameworks and improved training. It also means enhancing our capability to respond to threats, by improving the resiliency of our networks, and strengthening the relationships between our law enforcement communities.

Perhaps the greatest protection against such threats is the regular and substantive sharing of information on cyber threats, and stronger coordination in response to cyber-attacks and cybercrime. This is an area in which the United States and India continue to partner. We recently provided information on a high-profile hacking group operating from India, enabling our two countries to take concerted action against its threat. We are also engaged in efforts to improve the process through which other countries can obtain bank records and other forms of electronic evidence from the United States, for use in legal proceedings against illicit actors.

We should continue to build information-sharing mechanisms through law enforcement and intelligence channels, as well as within our private sector, as the bulk of our networks lie outside of public and government control. We must also continue to work through differences in our legal systems that can sometimes slow the sharing of information used during criminal investigations. Given the risks involved, these are worthwhile efforts.

Just two weeks ago, our governments participated in the U.S.-India Cyber dialogue. The United States and India held open and constructive conversations about substantive measures to increase cyber cooperation, ranging from coordinating on internet governance issues, deepening our existing cyber security collaboration, streamlining the exchange of information related to cybercrime, and U.S. support for India’s ambitious but essential cybersecurity skills development initiative. These, and other common objectives, highlight the criticality of the U.S.-India relationship, leverage the inseparable ties of our IT communities, and emphasize yet another example of our joint efforts to safeguard critical infrastructure and national security.

Our populations are among the most interconnected on the planet, which is in part a reflection of our shared values. The Internet is an unparalleled platform where voices from every corner of the globe can contribute to political, economic, and social discourse. Discussions on how to manage cyberspace can be difficult, because they touch on the core of our democratic values, including ethics, the role of government in society, and economic liberty. But if we commit ourselves to protecting internet freedom, the digital revolution will continue to power the opportunities our societies cherish most – by helping to strengthen governments, make us safer, boost economic growth, and promote free expression. And those are goals worth fighting for.

Thank you.

source: Speeches & Remarks | New Delhi, India - Embassy of the United States

Priorities: Information Governance Program

The Top 10 Priorities For Your Information Governance Program | Ervin Cohen & Jessup LLP - JDSupra:




more news links below (on mobile go to web version link below)


Follow @expvccom

Information Sharing, Cybersecurity Strategy

Information Sharing Can Help Fortify Your Cybersecurity Strategy | Polsinelli - JDSupra:


more news links below (on mobile go to web version link below)


Follow @expvccom

Assistant Secretary Strickling at Internet2 Global Summit

Remarks of Assistant Secretary Strickling at Internet2 Global Summit | NTIA:
Remarks of Lawrence E. Strickling--As Prepared for Delivery--

Assistant Secretary for Communications and Information
Internet2 Global Summit
Washington, D.C.
April 28, 2015

I am honored to be here to speak at Internet 2’s Global Summit. Internet2 has been a strong partner with NTIA as a recipient of a $62 million Recovery Act broadband grant. With this grant, Internet2 has lit or upgraded over 18,000 miles of a national fiber backbone network. This 100 gigabit per second backbone is accessible to more than 93,000 community anchor institutions through Internet 2’s partnership with regional research and education networks. Several of these networks also received NTIA grants so we know that in Michigan, North Carolina and numerous other states, the good work of Internet 2 and the research and education community is driving higher speeds and lower cost broadband for schools and other institutions of learning.

However, I did not come here today to talk about broadband. My topic today is Internet governance. This is an important and timely issue for everyone who relies on the Internet but particularly for the members of Internet2. As your website states, “the commercial Internet we know today was shaped by the vision and work of the people and organizations in the Internet2 community.” Indeed, we only enjoy the Internet today due to the engagement of the academic community decades ago.

The first four nodes on ARPANET, the experimental network from which the Internet evolved, were universities: UCLA, Stanford, the University of California at Santa Barbara and the University of Utah. The first message ever sent was between UCLA and Stanford. We know from history that this first attempt to login crashed the system but the problem was quickly fixed and the rest is history.

New challenges to the Internet emerge every day, whether they are related to cybersecurity, privacy, or the free flow of information across borders. As we confront these challenges, we continue to debate a key question that has dominated international discussions over the last decade or so, specifically who should govern the Internet? Who should make the decisions that determine what the Internet of tomorrow will look like? How can we ensure that the decisions made today will enable the Internet to continue to thrive as the amazing engine of economic growth and innovation we enjoy today?

The debate has focused on two very different choices. One choice is that governments alone should make the key decisions on the governance of the Internet. This is the choice favored by authoritarian governments that want to restrict the information available to their citizens. The other choice is to rely on all stakeholders to make these decisions through what is known as the multistakeholder model of Internet governance.

What do we mean by the multistakeholder model? One expert defines the multistakeholder model as different interest groups coming together on an equal footing to “identify problems, define solutions, and agree on roles and responsibilities for policy development, implementation, monitoring and evaluation.[1]”

From that description, there are two key attributes to emphasize: participation and consensus decision-making.

Let me start with participation. Internet policy issues draw a much larger range of stakeholders than traditional telecommunications issues. One key benefit of multistakeholder processes is that they can include and engage all interested parties. Such parties can include industry, civil society, government, technical and academic experts and even the general public. The Internet is a diverse, multi-layered system that thrives only through the cooperation of many different parties. Solving, or even meaningfully discussing, policy issues in this space, requires engaging these different parties. Indeed, by encouraging the participation of all interested parties, multistakeholder processes can encourage broader and more creative problem solving.

The second key attribute is consensus decision-making. It is important that stakeholders come together on an equal footing. The best way to ensure that all parties are treated equally is to make decisions on a consensus basis. Final decisions need to reflect the views of all stakeholders as opposed to just the views of only one of the stakeholder communities involved.

Multistakeholder organizations such as the Internet Engineering Task Force and the Internet Corporation for Assigned Names and Numbers (ICANN) have played a major role in the design and operation of the Internet and are directly responsible for its success. Within the Obama Administration, we believe that maintaining and extending this model is important to ensure the continued growth and innovation of the Internet.

There is bipartisan support for the multistakeholder model of Internet governance. Both Republican and Democratic administrations have consistently emphasized that the multistakeholder process is the best mechanism for making decisions about how the Internet should be managed. Congress agrees. Earlier this spring, the Senate unanimously passed Senate Resolution 71, which states that the “United States remains committed to the multistakeholder model of Internet governance in which the private sector works in collaboration with civil society, governments, and technical experts in a consensus fashion.”

Today, the Internet is at a critical juncture. We are continuing to oppose efforts by authoritarian regimes to replace multistakeholder decision making with a process limited only to governments. This debate came to a head in 2012 at the International Telecommunication Union’s World Conference on International Telecommunications (WCIT) in Dubai. At this meeting, governments split over whether the ITU, a United Nations organization in which only nations have a vote, should have more control over the Internet. A majority of countries there supported greater governmental control.

However, since that conference, we have seen a growing acceptance of the multistakeholder model around the world, but particularly in developing countries. Democracies in the developed world have long supported the multistakeholder model of Internet policymaking. The Organization for Economic Cooperation and Development (OECD) adopted a set of principles for Internet policymaking in 2011 that strongly endorse multistakeholder cooperation. The OECD principles state, “multistakeholder processes have been shown to provide the flexibility and global scalability required to address Internet policy challenges.”

What is now emerging is greater acceptance of the model in developing countries. A year ago, Brazil hosted the successful NetMundial conference, which brought together a wide range of stakeholders including technical experts, civil society groups, industry representatives and government officials, all on an equal footing with each other. At this meeting not only did participants agree that Internet governance should be built on democratic multistakeholder processes, the entire meeting was a demonstration of the open, participative, and consensus-driven governance that has allowed the Internet to develop as an unparalleled engine of economic growth and innovation.

Most recently, at the ITU’s 2014 Plenipotentiary conference in Busan, Korea late last year, we saw the fruits of all our work to preserve multistakeholder Internet governance. The United States achieved all of its objectives in Busan, including keeping the ITU’s work focused on its current mandate and not expanding its role into Internet and cybersecurity issues.

This validation of the multistakeholder model comes at a critical time. Last year, NTIA announced its intention to complete the privatization of the Internet Domain Name System (DNS). Key to the operation of the DNS is the performance of important technical functions known as the IANA functions, the most well known of which is the maintenance of the authoritative root zone file, the telephone book for the Internet that supports the routing of all traffic to websites.

The process of privatization of the DNS began in 1998, when NTIA entered into a Memorandum of Understanding (MOU) with ICANN to transition technical DNS coordination and management functions to the private sector. A year ago in March, NTIA asked ICANN to convene a multistakeholder process to develop a proposal to take the final step to complete the transition of the U.S. stewardship over the IANA functions to the international community. We did this to ensure that the multistakeholder model for DNS coordination continues. Some governments have long bristled at the historical role the U.S. government has played in the DNS and have used our continued stewardship of the DNS as an excuse to argue for greater government control over how the Internet is governed.

When we announced this transition, we outlined some specific conditions that must be addressed before this transition takes place. First, the proposal must support and enhance the multistakeholder model of Internet governance, in that it should be developed by the multistakeholder community and have broad community support. More specifically, we will not accept a transition proposal that replaces the NTIA role with a government-led or intergovernmental organization solution. Second, the proposal must maintain the security, stability, and resiliency of the domain name system. Third, it must meet the needs and expectations of the global customers and partners of the IANA services. And finally, it must maintain the openness of the Internet.

We are pleased that the community has responded enthusiastically to our call to develop a transition plan that will ensure the stability, security and openness of the Internet. The community is in the process of developing proposals related to the specific IANA functions as well as examining how to ensure ICANN remains accountable to the global Internet community.

I am confident that engaging the global Internet community to work out these important issues will strengthen the multistakeholder process and will result in ICANN’s becoming even more directly accountable to the customers of the IANA functions and to the broader Internet community.

Some of you here today are likely participating in the stakeholder discussions to design the transition plan. Others of you are no doubt wondering why you should care about this transition and what is at stake for you. The members of Internet2, such as universities and research institutions, depend on the free flow of information. Completing the privatization of the Domain Name System is an important step to ensure that the Internet remains a global platform for the free exchange of ideas, commerce and social progress.

Failing to complete the transition, as we promised 17 years ago, risks breaking trust in the United States and in the underlying system that has enabled the Internet to work seamlessly for consumers and businesses. Introducing this uncertainty could have a significant impact on American companies that depend on the Internet to do business if other countries respond by erecting barriers to the free flow of information or worst case, abandoning the long-held belief in the power of a single Internet root.

The transition plan is being developed by the Internet’s stakeholders and must be a proposal that generates consensus support from the multistakeholder community. All of you can play a role to ensure a good outcome. First, I encourage you to participate in the transition planning process. You are an important constituency and those crafting this plan must hear from you as this transition progresses. Second, stay informed on the progress of the transition. When the community completes its consensus plan, let your voice be heard in support of completing the transition. We all have a stake in this transition and in ensuring the Internet remains an open, dynamic platform for economic and social progress. Decades ago, the academic community played a central role in the development of the Internet; now we need you to play an active role in its future. Thank you for listening.

[1] Mueller, M.2010. Networks and States, Cambridge, MA: MIT Press, at 82, quoting Karen Banks.