4 4.5 Internet economy. With encryption comes security of user data, authentication, confidentiality and consumer trust in services. People undertake an increasing amount of legitimate activities over the Internet that involve personal information, such as banking, buying and selling goods, filing tax returns, and so on. Without encryption, e-commerce would never have taken off and cannot survive. Table 39: Definitions of Cybersecurity Definitions of cybersecurity differ slightly according to international and regional bodies, but the common theme to describe cybersecurity is protecting:  The availability of services  The integrity (security) of network infrastructure  The protection of private information Cyber security is defined by: the International Telecommunications Union (ITU) (and cited by ASEAN) 410 as: …the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organisation and user's assets..” 411  the European Union as: “…the safeguards and actions that can be used to protect the cyber domain, both in the civilian and military fields, from those threats that are associated with or that may harm its interdependent networks and information infrastructure. Cyber-security strives to preserve the availability and integrity of the networks and infrastructure and the confidentiality of the information contained therein.” 412  the Freedom Online Coalition as: “… the preservation – through policy, technology, and education – of the availability*, confidentiality* and integrity* of information and its underlying infrastructure so as to preserve the security of persons both online and offline.” *as defined by ISO 27000 standard. 413  Concerns about Cybersecurity, Human Rights and the ICT Sector Recent research by Citizen Lab has shown that CSOs around the world face the same threats of attack as governments and business, but have fewer resources to fend off a cyberattack. 414 The attacks on CSOs are intended to undermine communications, by taking websites offline or disrupting other communications. Encryption is not just important for safe transactions, it is also important for human rights defenders 415 and people at risk, so that they are able to communicate without the fear of their confidential communications being intercepted arbitrarily by intelligence agencies. 416 410 ASEAN, “Joint Ministerial Statement on ASEAN Cybersecurity Cooperation” (2013). ITU, “Overview of Cybersecurity“ (2008). 412 European Commission, “Cybersecurity Strategy of the European Union: An Open, Safe and Secure Cyberspace (2013), footnote 4. 413 Freedom Online Coalition, “WG 1 – An Internet Free and Secure” (last accessed August 2015). 414 Citizen Lab, ”Targeted Threats Against Civil Society“ (2015). 415 New technology is emerging to support field data collection by civil society organizations working in sensitive communities. See Martus. 416 Various tools are available to provide human rights defenders and people at risk with higher levels of encryption. The Tor Browser is a web browser that allows users to browse the internet anonymously. Additionally, Pretty Good Privacy (PGP) can be used for encrypting email messages. 411 182 PAGE CHAPTER 4.5: CYBER-SECURITY

Select target paragraph3