One of the biggest challenges for businesses around the world is the inability to properly attribute cyber attacks and enforce prosecution, according to an (ISC)2 security leader.
Many countries are working to promote and drive this movement forward but failing, according to Tony Cole, (ISC)2 board member and cyber security expert. He says the security industry needs a highly structured set of norms which outline the offences that can be prosecuted.
The industry also needs globally accepted rules on data sharing agreements, he says, so businesses and nations can collect adequate evidence needed to prosecute cyber attackers. These rules simply don't exist today and there is a "complete lack of agreement," Cole told IT Pro at the annual (ISC)2 Security Conference.
However, that isn't to say efforts haven't been made. Some good work was being done in Estonia on the two versions of the Talinn Manual, which aims to highlight how our current international laws could be applied to cyber but aren't. If it was, "we wouldn't have the issues that we do [today]," said Cole.
Cole has hands on experience of trying to create this kind of unified international standard. In 2013, he worked on the US State Department's Framework for Cyber Stability – a document trying to unify the US, Russia and China through cyber norms that would eventually be adopted the world over.
This eventually "went by the wayside" after it was discovered that members of the Chinese armed forces – the People's Liberation Army – were attacking US and UK companies, according to Cole.
"Now, the next year is when President Xi and President Obama signed an agreement and yet that really didn't have any teeth," ..
Support the originator by clicking the read the rest link below.
