Yes, I said cyber. Digital security and rights in international development coop
CC Attribution - ShareAlike 3.0 Germany:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor and the work or content is shared also in adapted form only under the conditions of this
Bornemann, Katrin
Raymond, Nathaniel A.
Alachkar, Mona
Dette, Rahel
Skierka, Isabel
Cyber. the word entails controversy: hype, misunderstandings, misappropriation, and above all many yet unanswered questions. Due to this and especially now this notion and topic are becoming increasingly important within international cooperation. Between network policy and security policy, between cyber arms race and cyber cynicism, one thing is often left out: What about the digital security of the poorest and most remote regions and populations? The more countries like Germany address the protection of their own digital infrastructures, the more it becomes apparent that we also have a global responsibility in this regard. However, an official "cyber development policy" does not...
 Thank you very much. ICT for D means ICT for Development. It is a great pleasure to open and introduce this last session. I'm very happy that so many of you came after three full days of excitement. I'm sure you all are very eager to hear the band and to party. First, let me explain who we are. I'm representing the Federal Ministry for Economic Cooperation and Development in short the BMZ. We have been at the Republic for four times already now. Why actually do we come here? Because we, like you, agree that digitalization affects all areas of life everywhere around the world. And we believe that digitalization is a process we have to accompany proactively but also critically. Today we have already discussed how to juggle possible dystopian and utopian futures of a truly interconnected digital world. And that world could actually bring prosperity and peace or signify the end of privacy and personal connection. And we have discussed and will keep discussing how the most remote and impoverished regions of our world can benefit from new trends. And that is the reason why we supported Better Place in writing this trend, Radar. And this is where we are trying to find out which future trends are actually important for development cooperation. I highly recommend it. We also launched today our digital agenda and it's a good read. And this is a strategic paper actually that we hope will shape development cooperation for the years to come. And we set strategic goals that my ministry is going to pursue. So after this quick promotion, cyber. I know it's a word that everybody uses. And yes, I said cyber. Yes, we say cyber. And for a development ministry, cyber is perhaps not the most obvious term, you might say. But as policy makers, we do see that the word cyber is often attached to other words to render them meaningless. But the word may not go away because the raising threats and uncertainties and this digital age will not go away. And to be very frank with you, we, in the other session, I was just saying listen and we as the federal ministry for development cooperation now, we have around 300 projects in different areas of ICT for development in all developing areas. But we until now do not have a single project on cyber security. For us, this is still an upcoming issue and we feel that this is going to be more and more important. But we are actually struggling and we need your comments and we need your advice to help shape future projects how we can actually support developing countries in the sector of cyber security. Last night, we had a briefing with a panelist and I enjoyed a quick chat with you, Nathaniel, outside. And maybe if I may quote that because I found a really eye opening. You know, like we are still looking at in which sectors could we become active as development cooperation. And you said something like you said, listen, there is a war on trust, right? A war on data. I hope I'm not stealing your punchlines, but I really liked it. And you explained to me that there are forces that actually work very intensively in trying to discredit civic society projects, NGOs, development cooperation using fake news and thus undermining the trust and the opposition in countries that try to strive for a more democratic place. And so this is really an area, I think, where we have to get active. Yeah, well, thanks again for that eye opener. So digitalization, we believe in that, can be a game changer in places where schools maybe too far away are for children to reach. We also had a great session today from Kyron. They're doing online education. And I think this is also a very sensitive topic when we look at refugees because those are the most vulnerable persons. And so in vulnerable contexts where we need to support opposition, it is also a question of data security when it comes to protecting the data from those refugees from the opposition. So this would be another sector where I would imagine would be a space where we could get active. And let's go back, online education, digital finance, electronic access to authorities, virtual meeting spaces, and always available information and communication tools on the Internet can have much more impact there in the developing world than probably here. If the right conditions are in place. And here, Mona, I'd like to quote you again. I found it really good talk last night. You were looking at me because I was trying to be honest and I was saying, okay, where should we get active? And you were looking at me and saying, well, Katrina, look at all your development cooperation works and projects that you have. And all of these would not be possible or would not work as good as they do if cybersecurity was not there. So it's the base, right? Well. So my ministry has embraced digitalization as an important tool and objective in our work. But we want to get active in the cybersecurity sector and now we need your help, your suggestions. And I'm very, very happy that we have you three here and Rahel as the moderator today. And I'm very much looking forward to all your comments. Thank you very much. Rahel, the floor is yours. Thank you, Katrin. And I'm going to hand over these microphones. One. There you go. And one further if I may. Thank you. Thank you very much for those opening remarks and thanks all of you for being here. I understand it's late. I am Rahel. I also work in German development and I will have the pleasure to welcome to the stage our three panelists who will introduce themselves. As you do, and I'm going to give you two minutes each to tell us quickly who you are, what you do roughly. But as you do, perhaps answer us the question, when did you start saying cyber? And why does it matter? Mona. It works. No need to tell. No need to tell. So we start talking about cyber the moment we realize that when we want to use the internet, it means that we are going into a new world that is called cyber. So it's since 10 or more, 10 years or more than this. And we talk cyber because we've seen some concrete things happening in our society because of moving to this new world. So we were obliged in some way to start adopting this new world, if you want. Excellent. And who are we? Oh, first of all, I'm a professor of law. I got involved in cybersecurity through our NGO, which is the Lebanese Information Technology Association, because our students in law, we have seen this, didn't understand what does it mean to go online and do some bad or risky behavior. So there we were so concerned about our youth. We were concerned about protecting them from others and from their own activities, their own behavior online. And also we have later on seen that it wasn't possible for us as Lebanese society or Lebanese country to be safe online if we don't cooperate with others. We have understood that it's not possible. We're not living alone in this world with the internet, with this openness to the whole world. And then we created the Pan-Arab Observatory for cybersecurity, where we have a public private sector and not only Lebanese people, we have also Arab countries involved with us. Some are public, institution, and some others are private. And I am at the same time at the Pan-Arab for cybersecurity, which is at the World Federation of Scientists. And that's it. Thank you. Okay. Isabel. Yeah, so I'm a researcher on the politics of cybersecurity, and I think that the term cyber also has something very political to it. I'm also a fellow at a think tank here in Berlin called Global Public Policy Institute and at the Internet Governance Forum Germany. But so how did I actually end up here? Because actually my background is in political science. And when I was studying in my master's degree at a so-called war studies department, that's where I came across the term first. And I think that also tells you a lot about the perception we often have about cyber, is that it belongs to the military in a way or that we often associate it with cyber warfare, cyber terrorism, cyber crime, you know. So I studied these aspects and then, you know, got more into this Internet Governance field and so on. And actually, for me, cybersecurity really means the security of networks and systems and then the extended security of individuals or users using these technologies. And this is, I think, a definition of cyber security that is more and more adopted also by different communities in civil society and the technical communities. And so I just like to very much push for this definition also in my work because I think it's very political and it always depends on the framing that you use. And we need to really find this in a more, you know, positive, upright way. How are you all doing? Good. All right. So I'm Nathaniel Raymond. I direct the signal program at the Harvard Humanitarian Initiative at the Harvard School of Public Health. It's a real pleasure to be here. Thanks for dragging me across the ocean. For me, my journey into cyber, as it were, really began in Biloxi, Mississippi in 2005. In the aftermath of Hurricane Katrina, I was deployed with Oxfam America down on the peninsula, which was the hardest hit area on the Mississippi part of the Gulf Coast. And it was about 72 hours out from landfall of a CAT 5 hurricane. Katrina was as pretty much as strong as it gets. And a wall of water had gone up over the peninsula like a blanket over a bed and gone over the other side. And at the end of the peninsula is primarily Biloxi's African American population and undocumented immigrant population that works in the casinos. And for 72 hours, there was no federal or state agencies on the peninsula. They were all up in the primarily white community. And so this is about 12 years ago. And we were scratching our heads trying to understand, is this just racism? Why was this population suddenly invisible? And we began to realize that a whole population had become digitally invisible to responders. That our way of seeing the need in that scenario had caused us to become blind to a certain demographic. And now fast forward 12 years. And really, for me, you know, Henri Dunant, do you all know who Henri Dunant is? Founder of the International Committee of the Red Cross. He was in a carriage going past the Battle of Solifrino, the aftermath of it. And you saw all the dying soldiers just left there for me. That was my personal solifrino. It made me realize that we were beginning to cause big data disasters through digital inequity and digital disparities. And that we had to not find out what to do with tech, but to figure out how to think about what tech does to people in events. So for me, that was the moment. That was my personal solifrino. Thank you. We also want to know who is in the room with us. So I have three questions for you and would like you to just let us know by short hands. First of all, in everyday life, you personally, do you say, allow me to use the phrase again, cyber frequently, if so, all the time? I would say that's about a quarter. Second question, thinking personally about your digital activity and perhaps your digital persona, how, no, do you feel in control? If so, raise your hand. You're fooling yourself. Interestingly, not the same people who rose their hand earlier. Third question, vice versa, who in this room currently can not sleep at night, literally, metaphorically speaking, thinking about all the things that are changing in the digital realm in our world? All right. So that's definitely the majority from all these questions. Nathaniel, at this session at the Republic, perhaps some of these people can't sleep well because they've been hearing a lot about hacking democracy, about digital security divides, about the internet having gone terribly wrong. How bad is everything? We don't even have a science of knowing how bad it is. So as Katrine said, and this is the critical phrase here, is that we are at a moment, a pivot moment in modality of attack. Let me translate that into English. If you go back to movies like Hackers with Angelina Jolie in the late 90s, they seem amazingly quaint, where the concern was how people got into data and systems to do things with it that were bad, also known as cyberkinetics. That's quaint compared to where we are now. Where we are now is where at the moment of the war on trust, where state actors and nonstate actors are weaponizing information in the way that information works in human systems and institutions to engage in, Japanese word here, a keto, to use what makes them open and free against them. So we're not just talking about infiltration, we're talking about weaponization, which in many cases depends on it. But what's the big problem here? Big problem here is that we need to upgrade our operating system, which is we don't have clarity on what human rights people have to protection from data, protection from attack, cyber attack, and rights to information. We don't know if information is humanitarian assistance. We don't know if information and development is a human right. We haven't agreed that. Now flip it again. Our Geneva Convention is basically, we're running Windows 5, we're running the international humanitarian law equivalent of Netscape, in the sense that right now we don't have a Geneva Convention for cyber warfare. Who is in order to combat? Who is removed from battle? I don't know. And so I'm going to just say one statement and then close here, and I want to hear from my colleagues because they're much more cogent than I am without jet lag. So someone said a statement two days ago that right now the weaponization of information represents, quote, a threat to the future of liberal Western society. Was that an activist? Was that some guy from Harvard? Was it someone on a blog? No, it was the US Deputy Army Chief of Staff in a security notice that went out to the Pentagon. Okay, we're not talking south by southwest here. The US Army has said that we are at a moment of war against how we trust institutions in each other. So sorry to tell you all, but what you guys do about this will define your generation and no pressure here, the future of human freedom in the 21st century. So take care of that and get back to me. All right, so Mona, you do work with young people. You do work with the future generation. And let's bring this conversation of how bad it is, perhaps back to your context, to one of these developing countries that we're speaking of. What's the situation like where you are in terms of threat scenarios and readiness to handle them? Well I think that in my country threats are at many levels. At the government level where our data, our big data is not protected. And when I say not protected, I'm saying this at the technical level as well as at the legal level. I mean, we don't, in case of breaches, in case of having to be cautious about protecting the data, corporations or even the public administration don't have this obligation in a text, in a legal text, saying that you have the obligation to protect data. People there are doing protection out of their interest. I will give you an example, for you, I don't know if you have an idea, but in Lebanon the banking sector is the most developed one. We are kind of Switzerland, the other Switzerland of the world. So and our economy heavily relies on banking sector. So you see that the banking sector is the one who is working on protecting our data. I mean that you can see the banks very have very, very secure systems and they are training their employee. We have kind of sorts in each bank. So, while in the other sectors we don't have this really serious interest or awareness of things. Health for example, our public health sector is not so aware of the importance of the sensitive data it has. And in the election 2008 or something like this, I don't remember the exact date, the data of the people of our personal data was put online by the Ministry of Interior without any measure of security. Whoever in the world could have access to this data. So that's, yes, yes, yes, it was open, it was there, on the net. Whoever wants to go online and see our data, see who are our relatives, our whatever, could have seen it. And I think that there are some countries who have already took this data. Also our educational institution where, you know, there are a lot of data there, are not so ready for or are not protected. And you know, we had this problem when we had this special court for Lebanon, the International Court for Lebanon, where they asked the Ministry of Interior for telecommunication data, you know, who called whom and who has which number, which is sensitive information and personal information. And we had this crisis and we sent some committee to France to study if the government of Lebanon has the right to give this data to foreign authorities, to this court, to for the investigator on this data. So you see, we are exposed. We are working as NGO, we are working actually on having a legislation to protect our personal data. Thank you. Because this is a great key because we do have a few more questions that we want to get to but you are talking about legislation and Isabelle, I have a slide for you because, sorry, that was a slide I could have shown earlier. This slide is from the International Telecommunications Union, ITU of the UN from 2014 and it's, if you can read, the cybersecurity commitment levels. Green meaning high, good if we believe cybersecurity is a good thing, red meaning low. Backing up on what you have been talking about in terms of legislation missing in certain areas, red pretty much means legislation is missing. Isabelle, why might the red parts be a problem? Are they? Why might the red parts on this map be problematic? Why is this an issue? So blue means very high then, right? I'm just looking for Germany. I'm just looking how Germany is doing. So I think the first thing that we need to understand and everyone says that but really understand is that this cyberspace we are talking about or let's say just the digital realm that we surf in is borderless, right? And so any threat emanating from anywhere in the world that is an online threat can spread anywhere it can affect anyone technically. So in that sense, I think it doesn't really matter where it's read here. I mean just in terms of the online perspective because in the digital realm you will have threats emanating from these places. But so what can you do about that? And I think this is when the map matters because you can then look at, okay, where do we need to improve cybersecurity in terms of the infrastructure but also in terms of the training, the strategy around that, in terms of the budget that is needed to build sustainable education programs or policy and that is I think where we need to do something. And this is where I think a lot of countries that are maybe a bit more blue on the map can help and can also transfer some of their knowledge, some of their information, some of their skills to really help out there and build a partnership in this. All right, let's stick at that point. Countries can help. So we're in Germany right now. Germany is blue. You know the German cyber capacity environment fairly well. Can Germany help? Yeah, so that's a difficult question of course. I think that Germany is doing pretty well. We have our second cybersecurity strategy from last year and we've heard that Germany is doing more than 300 digitalization projects abroad within the development context. What is a bit shocking to me here I have to say is that there is no security project and well it's about time, right? So I think if we really engage abroad with digitalization, security as was repeatedly stated has to be the first thought and it cannot be an afterthought because no technology will be sustainable or work in a sustainable way if it's not secure, securely built but also not securely applied. And this doesn't only mean that we need security technologies but this also means that we need to deal with it responsibly and do everything around it that we can to build this. So I think German cyber security is probably compared to other countries pretty well but of course we have a huge human resource problem as everyone knows I think. The ministry that is now really taking over the cyber domain let's say is the defense ministry in Germany as you probably also all know. And so I think what we have here though is a broad societal discussion and I think we just need more actors in this discussion, right? And we need also more ministries in this discussion because cyber security does not only belong to one part of government not only to one stakeholder and so in that sense we need to combine also the power of all the stakeholders that we find here for example at Repubica we have the Chaos Computer Club we have a lot of resources here we have crypto party people who can train people also abroad so what partnerships can we work with that and I think we have a lot of potential here. Thank you. Mona you will know this slide it's a paper that you wrote it's a proposition where you are saying that Lebanon needs a new national cyber security strategy. If I may summarize Lebanon does not currently have a national cyber security strategy. Lebanon as we just heard recently published a second one and in this paper you are calling both for a new strategy and for a cyber security in Lebanon. Isabelle I know has read the paper in detail so I'm going to jump ahead to Nathaniel and do tell us when countries like Lebanon say they want to develop a security strategy can countries like Germany and we are speaking here about Germany's involvement to some extent realistically work together on doing something like this collaboratively. Yes. How? The way to think about this is when you hear the title of this panel and you hear development in security it may sound like we are talking about helping poor people in poor countries that that's the point actually it's about everybody and so start to think about cyber security in the role the central leadership role that development in humanitarian agencies of both the government and NGO level not should must and will play as similar to how we think about global public health. If you don't have the capacity metaphorically to stop Ebola in the field right if you don't have capacity building that the type that Mona is talking about if you don't hit the red spots that Isabelle is talking about then it's going to go wildfire and here the point is it already is so our quote developed world cyber security depends on seeing the interconnectedness of an ecosystem of threats that means now it is the responsibility of governments and non-governmental actors together to see data as people that data protection is people protection right let's say it again data is people data is people I say all the time if I ever got tattooed which I'm never going to do but if I did I would have data as people right here because that's the true thing so get out of thinking about ones and zeros if we are going to protect people we must protect data and to do that we must build the capacity now that means that for Germany to say yes yes Germany not only has a role to play it's time for someone to be the lead sled dog here it's time not just for resources but for a vision go do that. Alright if we were to go do that Mona having your paper in mind where what is the one where do you see the most the biggest gaps where support needed. Support is needed at many levels let's start by the strategy and then by the legal and the organizational framework and capacity building because you know I let me just talk about an idea I had since I've heard about this project to have without any cybersecurity one when a country help or cooperate in with another country on cybersecurity project it's not helping actually the other country it's helping itself because when the other are not protected are not secure doesn't know how to protect themselves then their weak the weak link will later on impact influence the other countries the country who can or who is supposed to know how to protect itself so for the moment for example I can think of capacity building training sharing of knowledge transfer of knowledge and don't forget that Germany is part of the EU so you have this arsenal of text of legislation and of experience of approaching these subjects. Thank you so one word that we've heard quite a bit is this word cybersecurity capacity building and now only a quarter in the room say the word cyber regularly and this other word or term is quite long. Isabel what is it. Okay that's mean. So first let us start with cyber security just to get us straight again I think cyber security has three different dimensions in my mind it's first technical security of the networks and the devices that you look at secondly it's individual security or user security of those users that use the technologies and this is very much intertwined obviously and thirdly we often also speak about national security right we've heard this a lot here on the panel as well so all of these different dimensions are intertwined but can also as you know see snow and revelations and so on can also conflict sometimes. In my opinion cyber security is an essential part of national security also in the technical security sense because only if we have secure technologies in our countries in our critical infrastructures and our citizens are secure are we as a country secure so that's why I say you know technical security individual security is a foundation of national security when it comes to cyber security. Now when it comes to capacity building it means that I think first of all it's a neutral term we do capacity building here in Germany and we really need it we need to build capacity here we are seeing this right now when we talk about how to implement all these policies you know I don't know BIS federal office for information security that you might know which is responsible for information assurance has to do capacity building has to train people the Ministry of Defense has to do a lot of capacity building so we need to build up our competencies to use technologies but also the technologies themselves that we use and I think now in the international space we need to partner up to build capacity together the capacity to use technology responsibly and securely to build the foundation for a sustainable and really responsible digitalization that will last so that's what I would define it like but there might be other definitions around. Thank you a responsible and sustainable digitalization that will last and that makes me think of two quotes that I've heard in the course of the day today and so one of them was very recently at the previous session where the parliamentary state secretary of this very ministry was speaking and he said we want to use and shape digitalization for sustainable development worldwide. Now this very morning there was another talk by Danny O'Brien from the Electronic Frontier Foundation EFF and he was talking about the early days of the internet and what it was like to build the internet and he said in short it was going to be great and then a bad thing happens. So Nathaniel is this bad thing going to happen in our case as well? We have two big bad things. The first big bad thing and I'm going to say some words that you're going to be like what is he talking about and then I'm going to translate it. Our ethics and our human rights and legal theory as it relates to these issues is entirely about what's called PII. Does anyone know what PII is? Personally identifiable information. So you're in the United States we would say social security number, your driver's license number, your blood type. Well we live in the theory that I've laid out in a recent book chapter is we live in a DII world and DII means demographically identifiable information. These digital systems and digital data and algorithms and machine learning are making it very easy for us to identify the behavior patterns of groups of people who may not even know they're part of the same demographic, right? And the type of legal and ethical issues that come now from what is truly not mostly non-consensual experimentation often on some of the most vulnerable people in the world's data with this type of information, DII, that we can kill people with it not even though we did and not be technically unethical because our ethics are about PII, right? So the first big bad thing is already happening. It's like we're trying to take a bicycle on the autobahn, okay? It's not going so hot. We're using PII ethics about individual data for what's fundamentally DII problems. Let me give you an example from the European context, a LGBT lesbian gay bisexual transgender organization in a unnamed European city for security reasons were dealing with an attack by skinheads against the LGBT population in the city. So they created a map and they put the map out to as an advocacy tool to say here's where the attacks are happening. Within 48, 72 hours of the map, the attacks went through the roof. More people were in the hospital. What did it do? That organization created a DII clearing house for the skinheads where it gave them situational awareness that was better than what they had. It showed them where all the gay bars were, okay? And so we come into this work thinking that our assumptions and aspirations are going to make people safer, make them wealthier, right? We assume these things of technology. But what we're not doing is saying what is our right and responsibility obligations for a type of data that we haven't even defined. So the big nasty here is DII and the last point and I promise I'll shut up, two words to leave you with. Write them down. Get out the pints. Unicity and eccentricity. Very quick story. Colleague from MIT, Eve DeMontjoy had a theory that he could track the Kardashian sisters. You know, keeping up with the Kardashians, that he could take a random episode of the Kardashians and he could find the credit card data. And he did. It was an episode where Chloe and Kim were feeling down and they were taken by their sister, I believe Courtney, to a strip club in New York and Eve tracked that data. He then turned into an algorithm and thus the theory of unicity was born out of this experiment. The flip is eccentricity. Eccentricity is how you find in individual and large data sets. Eccentricity is how you take individual data and then locate them in large data sets. It means privacy is dying because we can weaponize PII to DII and back. Now if you're committing a genocide, if you're a sod, that's the ticket. So go fix that. Go fix that or come to us with your questions. I do want to take some time to have a bit more of a conversation. So yes, please, if you do have a question, if you would stand up and we'll receive a microphone. He promised to shut up, so we'll take in his microphone. Please perhaps quickly tell us, yes. Yeah. Hi. I'm a human rights person, so I'm asking human rights questions. I was hoping to learn a little bit more about the current initiatives or debates within BMZ. I know there's a human rights strategy for development cooperation and just from that, of course, there are a lot of questions that arise that actually link up very nicely with the last statement. For example, I'd be interested in questions like what happens or what is the current debate surrounding the export of surveillance technology from Germany and Europe. I'd be interested to learn how in implementing the human rights policy, protecting human rights defenders in developing countries where you operate, how do you support human rights defenders to access secure channels of information or communication. Or I'd also be interested, like in India, you're implementing a social security scheme that is working with a lot of digital data. And the impression I got so far is that everyone is happy that finally you got access to the social security system and you don't care so much or the people don't care so much about what happens to their data. How do you deal with that? What is the discussion? That's just three examples where I would like to get some more flash on the current debate. Thank you. Thank you. I'm going to take that question back to the panel actually and ask you what are the options from your opinion? Technically or regulating Lee and so forth? I don't mind. If I understood your question, you are asking about how to protect human rights. I'm asking about the current policy and implementation in the Ministry for Development Corporation. Okay, so I can't speak for the Ministry at all. I'm just a researcher on cyber security. But yeah, what would be possible then? So as we heard, I think out of these 300 digitalization initiatives, as far as I understood, there's no initiative yet really about security or privacy protection. Is that right? No? Okay. Yes. Thank you. Well, we do have those 300 projects and of course we also deal with data security. And when you look at our newly launched agenda, there is a big chapter in it when we look at human rights in the cyber sphere. So this is actually where we stand today. Of course, the colleagues from the Human Rights Department, which is not mine, mine is the ICT education department, they also work on the strategy. So I think this is something that we can maybe talk about later because this is something that the colleagues are more familiar with, with the human rights strategy in itself. And well, this is the first thing. Then you were asking about export surveillance. I think this is really a very important issue. Still, it is the export of German goods is of course not the mandate of our ministry. This is a different ministry, right? We don't export things. My ministry, you mean? Yeah, but I think the mandate of that is still the ministry for economic affairs. So this is something also what these colleagues are tackling. Then the secure channels of communication, just to be really quick. We are also doing projects here. Mainly, if I'm not mistaken, but correct me if I'm wrong, with the Deutsche Welle together. So there we have crypto projects also to save and security opposition. I think it was one, particularly one in Egypt. And then you were raising the question for the project in India, the public health data security project. Well, I'm sorry, the public health project. And this is really a point where it's a weak point. I'm not sure how exactly we do secure this data. And I really think that this is something that we have to look on, particularly and more closely. So thank you very much again for raising the awareness here. And yeah. Yeah, and I'd just like to jump in terms of what we can do. So I think, just look around, for example, here in Berlin or in maybe whatever city you come from. I think there are many small initiatives. Now I can think of the crypto party, which you might know, people who teach you how to encrypt information. People, organizations like Tactical Tech, who teach journalists, human rights defenders how to use technology securely. And I think we do have a lot of people here, for example, in Germany that know how to improve digital security for protecting people's human rights. And I think that it would be very good if, since the Ministry of Development, for example, has forces on the ground. They have people in these countries abroad and maybe also the foreign office, but that's the two ministries. And I think my suggestion would be pair up, go there and do workshops with people, teach them how to improve security. And probably not only in the big cities, but also go out. And I think this has to be a very local endeavor as well. Then another thing would be to do this maybe via online platforms. And I think in many projects you're already using online platforms for education, for example, I think these initiatives are important. And then obviously we also have legal frameworks here in Europe and in Germany that could serve as a basis for other countries to adopt. And so German policymakers could explain the policies, the advantages, disadvantages, and also kind of export this policy model. And this is already happening, for example, if you look at the European data protection laws, they have been adopted throughout the world in many countries already. And I think we should maybe invest a bit more force into this. Just very briefly. Just to words. I think also what can be done is you have to step up and work for it. Because there is no policy or strategy that can do the work for you. You understand what I mean? I mean, you have to work for your, no, no. I mean, even if it weren't in the policy, if it's your duty to be active and to protect yourself and say what you need and do what you want. And later on, policy or legislation or whoever is in the power will be obliged to cope or to do what you want. Okay, let's take more questions and we don't have too much time left. So we'll take three questions at a time if there are three and then we'll hand it to the panel. Hi, this is a question for Nathaniel. When you are talking to policymakers and you're trying to convince people to see this is a real important issue, do you actually use the term cybersecurity? Isn't this an easy way for you to fall into a trap of other states who are trying to argue that this is something new even though there are existing laws that just need to be transferred and translated into this new realm, but overall it isn't really that different? Yeah, thanks. I almost never say cybersecurity. And we have, in Europe, when you say data protection and when we say data protection, the United States means different things. When we say privacy, sometimes it means different things. In terms of advisory roles, my colleagues and I have played with the United Nations specifically on these issues. What is very clear is we mostly are not talking about viruses and we're not talking about servers. That's part of it. What we're really talking about is more than anything, we've got the mood lighting on now. More than anything, what we're really talking about is human security theory around how vulnerability, the vulnerability matrix has changed. And I loved your term, Mona, when you said we're engaged in a movement from one state to another. We are at this moment of we migrated with this industrial revolution based on what the tech could do. And we made no investments, no investments in everything that human beings need, which is laws, evidence, social compact. So what we're having to do now is to retrofit the social compact onto the back end. We issued something in January called the signal code. It's at signalcode.org. We have read all available international humanitarian and human rights law. I asked my team, okay, this is a funny moment. I went to my team and I said, and I have some very technical people, we do a lot of things with remote sensing. I said for the next six months, I don't want you to innovate anything. If I catch you innovating, you're fired. Okay? Please, for the love of God, do not have a good idea. And do not talk to me about adoption or scaling. I will throw something. I said for six months, we will do nothing but read all law everywhere. And I related to humanitarian law related to laws of warfare. And we're going to identify what rights related to information and cyber, what we are calling cybersecurity but data protection and people protection exists. And we found five. One, people have a right to information during disasters equal to food, water, shelter, medicine, other forms of humanitarian aid. Two, people have a right to be protected in how information and data is deployed. Three, people have a right back to emerging norm from European privacy law. Thank you, Europeans. Have a right to data privacy and security. Four, this is critical. People have a right to data agency to know what is being done with their data, to be involved in it and to not be a subject of experimentation without consent. And five, people have a right to redress and rectification. So really, mostly what we talk about is how we take that from some white guys sitting up here telling you stuff into a set of workflows and operational policies. That's mostly what I do. And cybersecurity is sometimes the last thing we say. All right. We are running out of time. So we will take two quick questions and be fast. Yes, please. Thank you. You said data is people. Data can also be organizations or companies. I'm on the board of an NGO that recently had a cyber attack and all of the data for the whole NGO and all the countries we operated was held for ransom. It was a very difficult thing to get out of. The economic impact of warfare on the country is pretty serious. The potential economic impact of cyber warfare, whether that is sort of IP, stealing IP from one country for things to be made in another place, could have a detriment, particularly to inventors, entrepreneurs, small, medium businesses, to try to make things from the start up. Do we have much of a sense of what the risk is to economic development of countries from cybersecurity? And before answering, let's hear the second question. Hi. My question, I think, I guess it's for you, Nathaniel. When it comes to the right to redress and rectification, in particular, I wanted to ask about in areas of war, in particular, say the Biafran War in Nigeria, where it happened, say, 50 years ago, I think. And that was caught up from the curriculum, where the government thought they were doing a good thing and expunged history from the curriculum. And so there's a dirt of information, right? And because of that, we're having new groups of agitators wanting to succeed, because now all that information is all, it's from everywhere. So is there a way for countries like, say, Nigeria, Rwanda, like countries that have been torn apart by war, genocide, where the right to information, like factual information from organizations like, say, the Red Cross and Doctors Without Borders, is distilled in a way that people can access it. It's accessible and it's not prone to misinterpretation. And we're having to deal with a new wave of wars and genocide all over again. All right. From war, let's go back first to the economic impact question. Mona, I believe you, where you get to respond to the economic impact of warfare. The economic impact is so clear, because if we go back to the WISIS, you will see that to benefit from the potential of ICT, you have to build trust. And when you talk about building trust, you are with cybersecurity. There is no digital economy without cybersecurity. And cybersecurity itself is becoming a part of the managing risk at cooperation. And it is already a market. So it is economy. There is no, the future economy cannot go without the cybersecurity. And if you allow me, I can give a short answer for, I'm afraid that the question you are asking does not have to be under the cybersecurity, because it is the responsibility of those who are posting this information. I mean, this is a responsibility of the media. And it touches this credibility of news going online. And it's the responsibility of those who do care for their history to put this information online. This is my opinion. They might think other people. Yeah. I'd just like to add something to your reply about the economic aspect. I'm not really aware of any data or statistics that I would say are very reliable about the risks for businesses. There are statistics about the cost of cybercrime, you know, that more than 500 billion per year and so on. You might be familiar with that. But in the end, I think it's very hard to estimate that, because how, you know, which factors do you count? Do you only fact monitor, do you only count monetary factors or what about reputational factors, for example? And for a small business, this can be kind of death, right? If your business doesn't have a reputation anymore, if the trust is gone, that's hard. And so I think that it's very hard to measure trust in that way. So maybe we should work on that, right? How do we measure this trust? How can we keep it up? And that links maybe also to Nathaniel's point earlier. So I said the World Economic Forum's Artificial Intelligence and IOT Future of Trust Ethics Network basically. We're trying to your point, Andrew. We're trying to figure out how we figure out a quantification answer, okay, on this. And so, and I want to introduce a term here. There are multiple types of exploitation of data going on with typologies, so types of exploitation that are different in the developing world. I call this, in many cases, data colonialism. We are at a moment where there is extraction and commodification in lower regulated environments that would not be possible in the United States. The joke I make all the time when I talk to humanitarians and development people who use data, I said, you do stuff in Africa, you might win the Nobel Prize for that you get arrested for in Kentucky. And so what we don't know how to measure it yet, but we're measuring it in a disparate way. And we are primarily six companies control most artificial intelligence algorithms, six. We are getting very good at measuring the economic cost of that because that's where the economic interest is. In terms of hacks of remittance data flowing from lesser developed countries or back and forth, we actually don't yet know how to measure the totality of the remittance environment because in many ways gender plays a really important role in culture. We don't have basically what we call teledemography, a theory of teledemographic assessment to be able to measure the scope of where does the economic effect live and we're primarily doing it for rich people. All right. Let's say we can keep talking about this last question after the session. We have reached the end of it. And before I would like to invite Katrin back to this before for a closing remark. In one sentence, the one most urgent thing in this complicated and complex domain that we've heard about, what's one thing that we, maybe all of us in this room, maybe the world needs? What's your recommendation? With a microphone, please. If I may. Mine is cooperation. There is no security or cybersecurity without cooperation. Even the traditional one doesn't go without. My last sentence is that security is not a zero sum game. It's always a win-win no matter what we might hear again from intelligence agencies. And that's the basis for cooperation then again. As the American educational theorist Jonathan Kozol said, charity is no substitute for justice. And I say innovation is no substitute for rights. And I wonder to pick up on one thing that we've heard on this panel is back to our original title, yes, I said cyber. We were already speaking in course earlier. Maybe we need to start saying yes, I said data is people. With that Katrin, it would be a pleasure if you could join us again quickly. We have a microphone for you. Let me just briefly thank everybody and also for the comments in the audience. What I learned is trust is a key word within this particular discourse. I learned that for financial transaction and also for all future digital economy, cybersecurity is the basis. Thank you very much also for raising this issue. I think this is something also very important. I learned that actually people are weaponizing information, but there is a war on trust. I learned that we have the obligation to protect the data. I also learned that, and I thank you very much Isabelle for really emphasizing this, that we can't just leave the whole issue of data protection or let's say cyber security to defense and military. But that we as development cooperation do really have a responsibility here and to that this is a sector where we need to get active. I also will take home that there is actually homework that we have to do. I heard you very clearly. We have to get active. I also heard Nathaniel saying like listen, this is something where also Germany within the whole development cooperation discourse could take a leading role. I have three to-dos on my to-do list. First get a tattoo, data is people. Second watch the Kardashians. And the third one is to finally design a good stable cybersecurity project. Thank you very much.
 Thank you very much.  ICT for D means ICT for Development.  It is a great pleasure to open and introduce this last session.  I'm very happy that so many of you came after three full days of excitement.  I'm sure you all are very eager to hear the band and to party.  First, let me explain who we are.  I'm representing the Federal Ministry for Economic Cooperation and Development in short  the BMZ.  We have been at the Republic for four times already now.  Why actually do we come here?  Because we, like you, agree that digitalization affects all areas of life everywhere around  the world.  And we believe that digitalization is a process we have to accompany proactively but also  critically.  Today we have already discussed how to juggle possible dystopian and utopian futures of  a truly interconnected digital world.  And that world could actually bring prosperity and peace or signify the end of privacy and  personal connection.  And we have discussed and will keep discussing how the most remote and impoverished regions  of our world can benefit from new trends.  And that is the reason why we supported Better Place in writing this trend, Radar.  And this is where we are trying to find out which future trends are actually important  for development cooperation.  I highly recommend it.  We also launched today our digital agenda and it's a good read.  And this is a strategic paper actually that we hope will shape development cooperation  for the years to come.  And we set strategic goals that my ministry is going to pursue.  So after this quick promotion, cyber.  I know it's a word that everybody uses.  And yes, I said cyber.  Yes, we say cyber.  And for a development ministry, cyber is perhaps not the most obvious term, you might say.  But as policy makers, we do see that the word cyber is often attached to other words to  render them meaningless.  But the word may not go away because the raising threats and uncertainties and this digital  age will not go away.  And to be very frank with you, we, in the other session, I was just saying listen and  we as the federal ministry for development cooperation now, we have around 300 projects  in different areas of ICT for development in all developing areas.  But we until now do not have a single project on cyber security.  For us, this is still an upcoming issue and we feel that this is going to be more and  more important.  But we are actually struggling and we need your comments and we need your advice to help  shape future projects how we can actually support developing countries in the sector  of cyber security.  Last night, we had a briefing with a panelist and I enjoyed a quick chat with you, Nathaniel,  outside.  And maybe if I may quote that because I found a really eye opening.  You know, like we are still looking at in which sectors could we become active as development  cooperation.  And you said something like you said, listen, there is a war on trust, right?  A war on data.  I hope I'm not stealing your punchlines, but I really liked it.  And you explained to me that there are forces that actually work very intensively in trying  to discredit civic society projects, NGOs, development cooperation using fake news and  thus undermining the trust and the opposition in countries that try to strive for a more  democratic place.  And so this is really an area, I think, where we have to get active.  Yeah, well, thanks again for that eye opener.  So digitalization, we believe in that, can be a game changer in places where schools  maybe too far away are for children to reach.  We also had a great session today from Kyron.  They're doing online education.  And I think this is also a very sensitive topic when we look at refugees because those  are the most vulnerable persons.  And so in vulnerable contexts where we need to support opposition, it is also a question  of data security when it comes to protecting the data from those refugees from the opposition.  So this would be another sector where I would imagine would be a space where we could get  active.  And let's go back, online education, digital finance, electronic access to authorities,  virtual meeting spaces, and always available information and communication tools on the  Internet can have much more impact there in the developing world than probably here.  If the right conditions are in place.  And here, Mona, I'd like to quote you again.  I found it really good talk last night.  You were looking at me because I was trying to be honest and I was saying, okay, where  should we get active?  And you were looking at me and saying, well, Katrina, look at all your development cooperation  works and projects that you have.  And all of these would not be possible or would not work as good as they do if cybersecurity  was not there.  So it's the base, right?  Well.  So my ministry has embraced digitalization as an important tool and objective in our  work.  But we want to get active in the cybersecurity sector and now we need your help, your suggestions.  And I'm very, very happy that we have you three here and Rahel as the moderator today.  And I'm very much looking forward to all your comments.  Thank you very much.  Rahel, the floor is yours.  Thank you, Katrin.  And I'm going to hand over these microphones.  One.  There you go.  And one further if I may.  Thank you.  Thank you very much for those opening remarks and thanks all of you for being here.  I understand it's late.  I am Rahel.  I also work in German development and I will have the pleasure to welcome to the stage  our three panelists who will introduce themselves.  As you do, and I'm going to give you two minutes each to tell us quickly who you are, what  you do roughly.  But as you do, perhaps answer us the question, when did you start saying cyber?  And why does it matter?  Mona.  It works.  No need to tell.  No need to tell.  So we start talking about cyber the moment we realize that when we want to use the internet,  it means that we are going into a new world that is called cyber.  So it's since 10 or more, 10 years or more than this.  And we talk cyber because we've seen some concrete things happening in our society because  of moving to this new world.  So we were obliged in some way to start adopting this new world, if you want.  Excellent.  And who are we?  Oh, first of all, I'm a professor of law.  I got involved in cybersecurity through our NGO, which is the Lebanese Information Technology  Association, because our students in law, we have seen this, didn't understand what  does it mean to go online and do some bad or risky behavior.  So there we were so concerned about our youth.  We were concerned about protecting them from others and from their own activities, their  own behavior online.  And also we have later on seen that it wasn't possible for us as Lebanese society or Lebanese  country to be safe online if we don't cooperate with others.  We have understood that it's not possible.  We're not living alone in this world with the internet, with this openness to the whole  world.  And then we created the Pan-Arab Observatory for cybersecurity, where we have a public  private sector and not only Lebanese people, we have also Arab countries involved with  us.  Some are public, institution, and some others are private.  And I am at the same time at the Pan-Arab for cybersecurity, which is at the World Federation  of Scientists.  And that's it.  Thank you.  Okay.  Isabel.  Yeah, so I'm a researcher on the politics of cybersecurity, and I think that the term  cyber also has something very political to it.  I'm also a fellow at a think tank here in Berlin called Global Public Policy Institute and  at the Internet Governance Forum Germany.  But so how did I actually end up here?  Because actually my background is in political science.  And when I was studying in my master's degree at a so-called war studies department, that's  where I came across the term first.  And I think that also tells you a lot about the perception we often have about cyber,  is that it belongs to the military in a way or that we often associate it with cyber warfare,  cyber terrorism, cyber crime, you know.  So I studied these aspects and then, you know, got more into this Internet Governance field  and so on.  And actually, for me, cybersecurity really means the security of networks and systems  and then the extended security of individuals or users using these technologies.  And this is, I think, a definition of cyber security that is more and more adopted also  by different communities in civil society and the technical communities.  And so I just like to very much push for this definition also in my work because I think  it's very political and it always depends on the framing that you use.  And we need to really find this in a more, you know, positive, upright way.  How are you all doing?  Good.  All right.  So I'm Nathaniel Raymond.  I direct the signal program at the Harvard Humanitarian Initiative at the Harvard School  of Public Health.  It's a real pleasure to be here.  Thanks for dragging me across the ocean.  For me, my journey into cyber, as it were, really began in Biloxi, Mississippi in 2005.  In the aftermath of Hurricane Katrina, I was deployed with Oxfam America down on the peninsula,  which was the hardest hit area on the Mississippi part of the Gulf Coast.  And it was about 72 hours out from landfall of a CAT 5 hurricane.  Katrina was as pretty much as strong as it gets.  And a wall of water had gone up over the peninsula like a blanket over a bed and gone over the  other side.  And at the end of the peninsula is primarily Biloxi's African American population and undocumented  immigrant population that works in the casinos.  And for 72 hours, there was no federal or state agencies on the peninsula.  They were all up in the primarily white community.  And so this is about 12 years ago.  And we were scratching our heads trying to understand, is this just racism?  Why was this population suddenly invisible?  And we began to realize that a whole population had become digitally invisible to responders.  That our way of seeing the need in that scenario had caused us to become blind to a certain  demographic.  And now fast forward 12 years.  And really, for me, you know, Henri Dunant, do you all know who Henri Dunant is?  Founder of the International Committee of the Red Cross.  He was in a carriage going past the Battle of Solifrino, the aftermath of it.  And you saw all the dying soldiers just left there for me.  That was my personal solifrino.  It made me realize that we were beginning to cause big data disasters through digital  inequity and digital disparities.  And that we had to not find out what to do with tech, but to figure out how to think  about what tech does to people in events.  So for me, that was the moment.  That was my personal solifrino.  Thank you.  We also want to know who is in the room with us.  So I have three questions for you and would like you to just let us know by short hands.  First of all, in everyday life, you personally, do you say, allow me to use the phrase again,  cyber frequently, if so, all the time?  I would say that's about a quarter.  Second question, thinking personally about your digital activity and perhaps your digital  persona, how, no, do you feel in control?  If so, raise your hand.  You're fooling yourself.  Interestingly, not the same people who rose their hand earlier.  Third question, vice versa, who in this room currently can not sleep at night, literally,  metaphorically speaking, thinking about all the things that are changing in the digital  realm in our world?  All right.  So that's definitely the majority from all these questions.  Nathaniel, at this session at the Republic, perhaps some of these people can't sleep well  because they've been hearing a lot about hacking democracy, about digital security  divides, about the internet having gone terribly wrong.  How bad is everything?  We don't even have a science of knowing how bad it is.  So as Katrine said, and this is the critical phrase here, is that we are at a moment, a  pivot moment in modality of attack.  Let me translate that into English.  If you go back to movies like Hackers with Angelina Jolie in the late 90s, they seem amazingly  quaint, where the concern was how people got into data and systems to do things with it  that were bad, also known as cyberkinetics.  That's quaint compared to where we are now.  Where we are now is where at the moment of the war on trust, where state actors and nonstate  actors are weaponizing information in the way that information works in human systems  and institutions to engage in, Japanese word here, a keto, to use what makes them open  and free against them.  So we're not just talking about infiltration, we're talking about weaponization, which in  many cases depends on it.  But what's the big problem here?  Big problem here is that we need to upgrade our operating system, which is we don't have  clarity on what human rights people have to protection from data, protection from attack,  cyber attack, and rights to information.  We don't know if information is humanitarian assistance.  We don't know if information and development is a human right.  We haven't agreed that.  Now flip it again.  Our Geneva Convention is basically, we're running Windows 5, we're running the international  humanitarian law equivalent of Netscape, in the sense that right now we don't have a Geneva  Convention for cyber warfare.  Who is in order to combat?  Who is removed from battle?  I don't know.  And so I'm going to just say one statement and then close here, and I want to hear from  my colleagues because they're much more cogent than I am without jet lag.  So someone said a statement two days ago that right now the weaponization of information  represents, quote, a threat to the future of liberal Western society.  Was that an activist?  Was that some guy from Harvard?  Was it someone on a blog?  No, it was the US Deputy Army Chief of Staff in a security notice that went out to the  Pentagon.  Okay, we're not talking south by southwest here.  The US Army has said that we are at a moment of war against how we trust institutions in  each other.  So sorry to tell you all, but what you guys do about this will define your generation  and no pressure here, the future of human freedom in the 21st century.  So take care of that and get back to me.  All right, so Mona, you do work with young people.  You do work with the future generation.  And let's bring this conversation of how bad it is, perhaps back to your context, to one  of these developing countries that we're speaking of.  What's the situation like where you are in terms of threat scenarios and readiness to  handle them?  Well I think that in my country threats are at many levels.  At the government level where our data, our big data is not protected.  And when I say not protected, I'm saying this at the technical level as well as at the legal  level.  I mean, we don't, in case of breaches, in case of having to be cautious about protecting  the data, corporations or even the public administration don't have this obligation  in a text, in a legal text, saying that you have the obligation to protect data.  People there are doing protection out of their interest.  I will give you an example, for you, I don't know if you have an idea, but in Lebanon the  banking sector is the most developed one.  We are kind of Switzerland, the other Switzerland of the world.  So and our economy heavily relies on banking sector.  So you see that the banking sector is the one who is working on protecting our data.  I mean that you can see the banks very have very, very secure systems and they are training  their employee.  We have kind of sorts in each bank.  So, while in the other sectors we don't have this really serious interest or awareness  of things.  Health for example, our public health sector is not so aware of the importance of the sensitive  data it has.  And in the election 2008 or something like this, I don't remember the exact date, the  data of the people of our personal data was put online by the Ministry of Interior without  any measure of security.  Whoever in the world could have access to this data.  So that's, yes, yes, yes, it was open, it was there, on the net.  Whoever wants to go online and see our data, see who are our relatives, our whatever, could  have seen it.  And I think that there are some countries who have already took this data.  Also our educational institution where, you know, there are a lot of data there, are not  so ready for or are not protected.  And you know, we had this problem when we had this special court for Lebanon, the International  Court for Lebanon, where they asked the Ministry of Interior for telecommunication data, you  know, who called whom and who has which number, which is sensitive information and personal  information.  And we had this crisis and we sent some committee to France to study if the government of Lebanon  has the right to give this data to foreign authorities, to this court, to for the investigator  on this data.  So you see, we are exposed.  We are working as NGO, we are working actually on having a legislation to protect our personal  data.  Thank you.  Because this is a great key because we do have a few more questions that we want to get  to but you are talking about legislation and Isabelle, I have a slide for you because,  sorry, that was a slide I could have shown earlier.  This slide is from the International Telecommunications Union, ITU of the UN from 2014 and it's, if  you can read, the cybersecurity commitment levels.  Green meaning high, good if we believe cybersecurity is a good thing, red meaning low.  Backing up on what you have been talking about in terms of legislation missing in certain  areas, red pretty much means legislation is missing.  Isabelle, why might the red parts be a problem?  Are they?  Why might the red parts on this map be problematic?  Why is this an issue?  So blue means very high then, right?  I'm just looking for Germany.  I'm just looking how Germany is doing.  So I think the first thing that we need to understand and everyone says that but really  understand is that this cyberspace we are talking about or let's say just the digital  realm that we surf in is borderless, right?  And so any threat emanating from anywhere in the world that is an online threat can  spread anywhere it can affect anyone technically.  So in that sense, I think it doesn't really matter where it's read here.  I mean just in terms of the online perspective because in the digital realm you will have  threats emanating from these places.  But so what can you do about that?  And I think this is when the map matters because you can then look at, okay, where do we need  to improve cybersecurity in terms of the infrastructure but also in terms of the training, the strategy  around that, in terms of the budget that is needed to build sustainable education programs  or policy and that is I think where we need to do something.  And this is where I think a lot of countries that are maybe a bit more blue on the map can  help and can also transfer some of their knowledge, some of their information, some of their skills  to really help out there and build a partnership in this.  All right, let's stick at that point.  Countries can help.  So we're in Germany right now.  Germany is blue.  You know the German cyber capacity environment fairly well.  Can Germany help?  Yeah, so that's a difficult question of course.  I think that Germany is doing pretty well.  We have our second cybersecurity strategy from last year and we've heard that Germany  is doing more than 300 digitalization projects abroad within the development context.  What is a bit shocking to me here I have to say is that there is no security project and  well it's about time, right?  So I think if we really engage abroad with digitalization, security as was repeatedly  stated has to be the first thought and it cannot be an afterthought because no technology  will be sustainable or work in a sustainable way if it's not secure, securely built but  also not securely applied.  And this doesn't only mean that we need security technologies but this also means that we need  to deal with it responsibly and do everything around it that we can to build this.  So I think German cyber security is probably compared to other countries pretty well but  of course we have a huge human resource problem as everyone knows I think.  The ministry that is now really taking over the cyber domain let's say is the defense  ministry in Germany as you probably also all know.  And so I think what we have here though is a broad societal discussion and I think we  just need more actors in this discussion, right?  And we need also more ministries in this discussion because cyber security does not only belong  to one part of government not only to one stakeholder and so in that sense we need to  combine also the power of all the stakeholders that we find here for example at Repubica  we have the Chaos Computer Club we have a lot of resources here we have crypto party  people who can train people also abroad so what partnerships can we work with that and  I think we have a lot of potential here.  Thank you.  Mona you will know this slide it's a paper that you wrote it's a proposition where you  are saying that Lebanon needs a new national cyber security strategy.  If I may summarize Lebanon does not currently have a national cyber security strategy.  Lebanon as we just heard recently published a second one and in this paper you are calling  both for a new strategy and for a cyber security in Lebanon.  Isabelle I know has read the paper in detail so I'm going to jump ahead to Nathaniel and  do tell us when countries like Lebanon say they want to develop a security strategy can  countries like Germany and we are speaking here about Germany's involvement to some extent  realistically work together on doing something like this collaboratively.  Yes.  How?  The way to think about this is when you hear the title of this panel and you hear development  in security it may sound like we are talking about helping poor people in poor countries  that that's the point actually it's about everybody and so start to think about cyber  security in the role the central leadership role that development in humanitarian agencies  of both the government and NGO level not should must and will play as similar to how we think  about global public health.  If you don't have the capacity metaphorically to stop Ebola in the field right if you don't  have capacity building that the type that Mona is talking about if you don't hit the red  spots that Isabelle is talking about then it's going to go wildfire and here the point  is it already is so our quote developed world cyber security depends on seeing the interconnectedness  of an ecosystem of threats that means now it is the responsibility of governments and  non-governmental actors together to see data as people that data protection is people protection  right let's say it again data is people data is people I say all the time if I ever got  tattooed which I'm never going to do but if I did I would have data as people right here  because that's the true thing so get out of thinking about ones and zeros if we are going  to protect people we must protect data and to do that we must build the capacity now  that means that for Germany to say yes yes Germany not only has a role to play it's time  for someone to be the lead sled dog here it's time not just for resources but for a vision  go do that.  Alright if we were to go do that Mona having your paper in mind where what is the one where  do you see the most the biggest gaps where support needed.  Support is needed at many levels let's start by the strategy and then by the legal and  the organizational framework and capacity building because you know I let me just talk  about an idea I had since I've heard about this project to have without any cybersecurity  one when a country help or cooperate in with another country on cybersecurity project it's  not helping actually the other country it's helping itself because when the other are  not protected are not secure doesn't know how to protect themselves then their weak  the weak link will later on impact influence the other countries the country who can or  who is supposed to know how to protect itself so for the moment for example I can think  of capacity building training sharing of knowledge transfer of knowledge and don't forget that  Germany is part of the EU so you have this arsenal of text of legislation and of experience  of approaching these subjects.  Thank you so one word that we've heard quite a bit is this word cybersecurity capacity  building and now only a quarter in the room say the word cyber regularly and this other  word or term is quite long.  Isabel what is it.  Okay that's mean.  So first let us start with cyber security just to get us straight again I think cyber  security has three different dimensions in my mind it's first technical security of the  networks and the devices that you look at secondly it's individual security or user  security of those users that use the technologies and this is very much intertwined obviously  and thirdly we often also speak about national security right we've heard this a lot here  on the panel as well so all of these different dimensions are intertwined but can also as  you know see snow and revelations and so on can also conflict sometimes.  In my opinion cyber security is an essential part of national security also in the technical  security sense because only if we have secure technologies in our countries in our critical  infrastructures and our citizens are secure are we as a country secure so that's why I  say you know technical security individual security is a foundation of national security  when it comes to cyber security.  Now when it comes to capacity building it means that I think first of all it's a neutral  term we do capacity building here in Germany and we really need it we need to build capacity  here we are seeing this right now when we talk about how to implement all these policies  you know I don't know BIS federal office for information security that you might know  which is responsible for information assurance has to do capacity building has to train people  the Ministry of Defense has to do a lot of capacity building so we need to build up our  competencies to use technologies but also the technologies themselves that we use and  I think now in the international space we need to partner up to build capacity together  the capacity to use technology responsibly and securely to build the foundation for  a sustainable and really responsible digitalization that will last so that's what I would define  it like but there might be other definitions around.  Thank you a responsible and sustainable digitalization that will last and that makes me think of two  quotes that I've heard in the course of the day today and so one of them was very recently  at the previous session where the parliamentary state secretary of this very ministry was  speaking and he said we want to use and shape digitalization for sustainable development  worldwide.  Now this very morning there was another talk by Danny O'Brien from the Electronic Frontier  Foundation EFF and he was talking about the early days of the internet and what it was  like to build the internet and he said in short it was going to be great and then a  bad thing happens.  So Nathaniel is this bad thing going to happen in our case as well?  We have two big bad things.  The first big bad thing and I'm going to say some words that you're going to be like what  is he talking about and then I'm going to translate it.  Our ethics and our human rights and legal theory as it relates to these issues is entirely  about what's called PII.  Does anyone know what PII is?  Personally identifiable information.  So you're in the United States we would say social security number, your driver's license  number, your blood type.  Well we live in the theory that I've laid out in a recent book chapter is we live in  a DII world and DII means demographically identifiable information.  These digital systems and digital data and algorithms and machine learning are making  it very easy for us to identify the behavior patterns of groups of people who may not even  know they're part of the same demographic, right?  And the type of legal and ethical issues that come now from what is truly not mostly non-consensual  experimentation often on some of the most vulnerable people in the world's data with  this type of information, DII, that we can kill people with it not even though we did  and not be technically unethical because our ethics are about PII, right?  So the first big bad thing is already happening.  It's like we're trying to take a bicycle on the autobahn, okay?  It's not going so hot.  We're using PII ethics about individual data for what's fundamentally DII problems.  Let me give you an example from the European context, a LGBT lesbian gay bisexual transgender  organization in a unnamed European city for security reasons were dealing with an attack  by skinheads against the LGBT population in the city.  So they created a map and they put the map out to as an advocacy tool to say here's where  the attacks are happening.  Within 48, 72 hours of the map, the attacks went through the roof.  More people were in the hospital.  What did it do?  That organization created a DII clearing house for the skinheads where it gave them situational  awareness that was better than what they had.  It showed them where all the gay bars were, okay?  And so we come into this work thinking that our assumptions and aspirations are going  to make people safer, make them wealthier, right?  We assume these things of technology.  But what we're not doing is saying what is our right and responsibility obligations for  a type of data that we haven't even defined.  So the big nasty here is DII and the last point and I promise I'll shut up, two words  to leave you with.  Write them down.  Get out the pints.  Unicity and eccentricity.  Very quick story.  Colleague from MIT, Eve DeMontjoy had a theory that he could track the Kardashian sisters.  You know, keeping up with the Kardashians, that he could take a random episode of the  Kardashians and he could find the credit card data.  And he did.  It was an episode where Chloe and Kim were feeling down and they were taken by their  sister, I believe Courtney, to a strip club in New York and Eve tracked that data.  He then turned into an algorithm and thus the theory of unicity was born out of this  experiment.  The flip is eccentricity.  Eccentricity is how you find in individual and large data sets.  Eccentricity is how you take individual data and then locate them in large data sets.  It means privacy is dying because we can weaponize PII to DII and back.  Now if you're committing a genocide, if you're a sod, that's the ticket.  So go fix that.  Go fix that or come to us with your questions.  I do want to take some time to have a bit more of a conversation.  So yes, please, if you do have a question, if you would stand up and we'll receive a  microphone.  He promised to shut up, so we'll take in his microphone.  Please perhaps quickly tell us, yes.  Yeah.  Hi.  I'm a human rights person, so I'm asking human rights questions.  I was hoping to learn a little bit more about the current initiatives or debates within  BMZ.  I know there's a human rights strategy for development cooperation and just from that,  of course, there are a lot of questions that arise that actually link up very nicely with  the last statement.  For example, I'd be interested in questions like what happens or what is the current debate  surrounding the export of surveillance technology from Germany and Europe.  I'd be interested to learn how in implementing the human rights policy, protecting human  rights defenders in developing countries where you operate, how do you support human  rights defenders to access secure channels of information or communication.  Or I'd also be interested, like in India, you're implementing a social security scheme  that is working with a lot of digital data.  And the impression I got so far is that everyone is happy that finally you got access to the  social security system and you don't care so much or the people don't care so much about  what happens to their data.  How do you deal with that?  What is the discussion?  That's just three examples where I would like to get some more flash on the current debate.  Thank you.  Thank you.  I'm going to take that question back to the panel actually and ask you what are the options  from your opinion?  Technically or regulating Lee and so forth?  I don't mind.  If I understood your question, you are asking about how to protect human rights.  I'm asking about the current policy and implementation in the Ministry for Development  Corporation.  Okay, so I can't speak for the Ministry at all.  I'm just a researcher on cyber security.  But yeah, what would be possible then?  So as we heard, I think out of these 300 digitalization initiatives, as far as I understood, there's  no initiative yet really about security or privacy protection.  Is that right?  No?  Okay.  Yes.  Thank you.  Well, we do have those 300 projects and of course we also deal with data security.  And when you look at our newly launched agenda, there is a big chapter in it when we look  at human rights in the cyber sphere.  So this is actually where we stand today.  Of course, the colleagues from the Human Rights Department, which is not mine, mine  is the ICT education department, they also work on the strategy.  So I think this is something that we can maybe talk about later because this is something  that the colleagues are more familiar with, with the human rights strategy in itself.  And well, this is the first thing.  Then you were asking about export surveillance.  I think this is really a very important issue.  Still, it is the export of German goods is of course not the mandate of our ministry.  This is a different ministry, right?  We don't export things.  My ministry, you mean?  Yeah, but I think the mandate of that is still the ministry for economic affairs.  So this is something also what these colleagues are tackling.  Then the secure channels of communication, just to be really quick.  We are also doing projects here.  Mainly, if I'm not mistaken, but correct me if I'm wrong, with the Deutsche Welle  together.  So there we have crypto projects also to save and security opposition.  I think it was one, particularly one in Egypt.  And then you were raising the question for the project in India, the public health data  security project.  Well, I'm sorry, the public health project.  And this is really a point where it's a weak point.  I'm not sure how exactly we do secure this data.  And I really think that this is something that we have to look on, particularly and more  closely.  So thank you very much again for raising the awareness here.  And yeah.  Yeah, and I'd just like to jump in terms of what we can do.  So I think, just look around, for example, here in Berlin or in maybe whatever city you  come from.  I think there are many small initiatives.  Now I can think of the crypto party, which you might know, people who teach you how to  encrypt information.  People, organizations like Tactical Tech, who teach journalists, human rights defenders  how to use technology securely.  And I think we do have a lot of people here, for example, in Germany that know how to improve  digital security for protecting people's human rights.  And I think that it would be very good if, since the Ministry of Development, for example,  has forces on the ground.  They have people in these countries abroad and maybe also the foreign office, but that's  the two ministries.  And I think my suggestion would be pair up, go there and do workshops with people, teach  them how to improve security.  And probably not only in the big cities, but also go out.  And I think this has to be a very local endeavor as well.  Then another thing would be to do this maybe via online platforms.  And I think in many projects you're already using online platforms for education, for  example, I think these initiatives are important.  And then obviously we also have legal frameworks here in Europe and in Germany that could serve  as a basis for other countries to adopt.  And so German policymakers could explain the policies, the advantages, disadvantages, and  also kind of export this policy model.  And this is already happening, for example, if you look at the European data protection  laws, they have been adopted throughout the world in many countries already.  And I think we should maybe invest a bit more force into this.  Just very briefly.  Just to words.  I think also what can be done is you have to step up and work for it.  Because there is no policy or strategy that can do the work for you.  You understand what I mean?  I mean, you have to work for your, no, no.  I mean, even if it weren't in the policy, if it's your duty to be active and to protect  yourself and say what you need and do what you want.  And later on, policy or legislation or whoever is in the power will be obliged to cope or  to do what you want.  Okay, let's take more questions and we don't have too much time left.  So we'll take three questions at a time if there are three and then we'll hand it to  the panel.  Hi, this is a question for Nathaniel.  When you are talking to policymakers and you're trying to convince people to see this is a  real important issue, do you actually use the term cybersecurity?  Isn't this an easy way for you to fall into a trap of other states who are trying to argue  that this is something new even though there are existing laws that just need to be transferred  and translated into this new realm, but overall it isn't really that different?  Yeah, thanks.  I almost never say cybersecurity.  And we have, in Europe, when you say data protection and when we say data protection,  the United States means different things.  When we say privacy, sometimes it means different things.  In terms of advisory roles, my colleagues and I have played with the United Nations specifically  on these issues.  What is very clear is we mostly are not talking about viruses and we're not talking about  servers.  That's part of it.  What we're really talking about is more than anything, we've got the mood lighting on now.  More than anything, what we're really talking about is human security theory around how  vulnerability, the vulnerability matrix has changed.  And I loved your term, Mona, when you said we're engaged in a movement from one state  to another.  We are at this moment of we migrated with this industrial revolution based on what the  tech could do.  And we made no investments, no investments in everything that human beings need, which  is laws, evidence, social compact.  So what we're having to do now is to retrofit the social compact onto the back end.  We issued something in January called the signal code.  It's at signalcode.org.  We have read all available international humanitarian and human rights law.  I asked my team, okay, this is a funny moment.  I went to my team and I said, and I have some very technical people, we do a lot of things  with remote sensing.  I said for the next six months, I don't want you to innovate anything.  If I catch you innovating, you're fired.  Okay?  Please, for the love of God, do not have a good idea.  And do not talk to me about adoption or scaling.  I will throw something.  I said for six months, we will do nothing but read all law everywhere.  And I related to humanitarian law related to laws of warfare.  And we're going to identify what rights related to information and cyber, what we are calling  cybersecurity but data protection and people protection exists.  And we found five.  One, people have a right to information during disasters equal to food, water, shelter, medicine,  other forms of humanitarian aid.  Two, people have a right to be protected in how information and data is deployed.  Three, people have a right back to emerging norm from European privacy law.  Thank you, Europeans.  Have a right to data privacy and security.  Four, this is critical.  People have a right to data agency to know what is being done with their data, to be  involved in it and to not be a subject of experimentation without consent.  And five, people have a right to redress and rectification.  So really, mostly what we talk about is how we take that from some white guys sitting up  here telling you stuff into a set of workflows and operational policies.  That's mostly what I do.  And cybersecurity is sometimes the last thing we say.  All right.  We are running out of time.  So we will take two quick questions and be fast.  Yes, please.  Thank you.  You said data is people.  Data can also be organizations or companies.  I'm on the board of an NGO that recently had a cyber attack and all of the data for the  whole NGO and all the countries we operated was held for ransom.  It was a very difficult thing to get out of.  The economic impact of warfare on the country is pretty serious.  The potential economic impact of cyber warfare, whether that is sort of IP, stealing IP from  one country for things to be made in another place, could have a detriment, particularly  to inventors, entrepreneurs, small, medium businesses, to try to make things from the  start up.  Do we have much of a sense of what the risk is to economic development of countries from  cybersecurity?  And before answering, let's hear the second question.  Hi.  My question, I think, I guess it's for you, Nathaniel.  When it comes to the right to redress and rectification, in particular, I wanted to ask about in areas  of war, in particular, say the Biafran War in Nigeria, where it happened, say, 50 years  ago, I think.  And that was caught up from the curriculum, where the government thought they were doing  a good thing and expunged history from the curriculum.  And so there's a dirt of information, right?  And because of that, we're having new groups of agitators wanting to succeed, because now  all that information is all, it's from everywhere.  So is there a way for countries like, say, Nigeria, Rwanda, like countries that have  been torn apart by war, genocide, where the right to information, like factual information  from organizations like, say, the Red Cross and Doctors Without Borders, is distilled in  a way that people can access it.  It's accessible and it's not prone to misinterpretation.  And we're having to deal with a new wave of wars and genocide all over again.  All right.  From war, let's go back first to the economic impact question.  Mona, I believe you, where you get to respond to the economic impact of warfare.  The economic impact is so clear, because if we go back to the WISIS, you will see that  to benefit from the potential of ICT, you have to build trust.  And when you talk about building trust, you are with cybersecurity.  There is no digital economy without cybersecurity.  And cybersecurity itself is becoming a part of the managing risk at cooperation.  And it is already a market.  So it is economy.  There is no, the future economy cannot go without the cybersecurity.  And if you allow me, I can give a short answer for, I'm afraid that the question you are  asking does not have to be under the cybersecurity, because it is the responsibility of those  who are posting this information.  I mean, this is a responsibility of the media.  And it touches this credibility of news going online.  And it's the responsibility of those who do care for their history to put this information  online.  This is my opinion.  They might think other people.  Yeah.  I'd just like to add something to your reply about the economic aspect.  I'm not really aware of any data or statistics that I would say are very reliable about the  risks for businesses.  There are statistics about the cost of cybercrime, you know, that more than 500 billion per year  and so on.  You might be familiar with that.  But in the end, I think it's very hard to estimate that, because how, you know, which  factors do you count?  Do you only fact monitor, do you only count monetary factors or what about reputational  factors, for example?  And for a small business, this can be kind of death, right?  If your business doesn't have a reputation anymore, if the trust is gone, that's hard.  And so I think that it's very hard to measure trust in that way.  So maybe we should work on that, right?  How do we measure this trust?  How can we keep it up?  And that links maybe also to Nathaniel's point earlier.  So I said the World Economic Forum's Artificial Intelligence and IOT Future of Trust Ethics  Network basically.  We're trying to your point, Andrew.  We're trying to figure out how we figure out a quantification answer, okay, on this.  And so, and I want to introduce a term here.  There are multiple types of exploitation of data going on with typologies, so types of  exploitation that are different in the developing world.  I call this, in many cases, data colonialism.  We are at a moment where there is extraction and commodification in lower regulated environments  that would not be possible in the United States.  The joke I make all the time when I talk to humanitarians and development people who use  data, I said, you do stuff in Africa, you might win the Nobel Prize for that you get  arrested for in Kentucky.  And so what we don't know how to measure it yet, but we're measuring it in a disparate  way.  And we are primarily six companies control most artificial intelligence algorithms, six.  We are getting very good at measuring the economic cost of that because that's where  the economic interest is.  In terms of hacks of remittance data flowing from lesser developed countries or back and  forth, we actually don't yet know how to measure the totality of the remittance environment  because in many ways gender plays a really important role in culture.  We don't have basically what we call teledemography, a theory of teledemographic assessment to  be able to measure the scope of where does the economic effect live and we're primarily  doing it for rich people.  All right.  Let's say we can keep talking about this last question after the session.  We have reached the end of it.  And before I would like to invite Katrin back to this before for a closing remark.  In one sentence, the one most urgent thing in this complicated and complex domain that  we've heard about, what's one thing that we, maybe all of us in this room, maybe the world  needs?  What's your recommendation?  With a microphone, please.  If I may.  Mine is cooperation.  There is no security or cybersecurity without cooperation.  Even the traditional one doesn't go without.  My last sentence is that security is not a zero sum game.  It's always a win-win no matter what we might hear again from intelligence agencies.  And that's the basis for cooperation then again.  As the American educational theorist Jonathan Kozol said, charity is no substitute for justice.  And I say innovation is no substitute for rights.  And I wonder to pick up on one thing that we've heard on this panel is back to our original  title, yes, I said cyber.  We were already speaking in course earlier.  Maybe we need to start saying yes, I said data is people.  With that Katrin, it would be a pleasure if you could join us again quickly.  We have a microphone for you.  Let me just briefly thank everybody and also for the comments in the audience.  What I learned is trust is a key word within this particular discourse.  I learned that for financial transaction and also for all future digital economy, cybersecurity  is the basis.  Thank you very much also for raising this issue.  I think this is something also very important.  I learned that actually people are weaponizing information, but there is a war on trust.  I learned that we have the obligation to protect the data.  I also learned that, and I thank you very much Isabelle for really emphasizing this,  that we can't just leave the whole issue of data protection or let's say cyber security  to defense and military.  But that we as development cooperation do really have a responsibility here and to that  this is a sector where we need to get active.  I also will take home that there is actually homework that we have to do.  I heard you very clearly.  We have to get active.  I also heard Nathaniel saying like listen, this is something where also Germany within  the whole development cooperation discourse could take a leading role.  I have three to-dos on my to-do list.  First get a tattoo, data is people.  Second watch the Kardashians.  And the third one is to finally design a good stable cybersecurity project.  Thank you very much.
re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_0_119.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_120_167.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_168_659.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_660_1259.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_1260_1307.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_1308_1367.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_1368_1799.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_1800_2327.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_2328_2507.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_2508_7079.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_7080_7283.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_7284_8387.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_8388_9371.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_9372_9803.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_9804_11303.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_11304_11723.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_11724_12143.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_12144_13415.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_13416_18491.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_18492_22319.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_22320_22715.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_22716_22871.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_22872_23363.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_23364_24359.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_24360_24551.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_24552_29123.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_29124_29927.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_29928_30503.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_30504_33179.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_33180_34151.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_34152_34559.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_34560_35447.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_35448_35687.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_35688_35927.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_35928_36119.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_36120_37259.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_37260_40343.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_40344_42827.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_42828_43967.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_43968_47159.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_47160_48107.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_48108_50327.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_50328_53855.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_53856_57467.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_57468_61583.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_61584_61811.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_61812_66263.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_66264_66695.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_66696_66851.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_66852_66935.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_66936_67427.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_67428_67619.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_67620_67943.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_67944_68063.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_68064_69767.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_69768_70139.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_70140_70655.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_70656_71039.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_71040_71831.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_71832_73259.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_73260_73487.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_73488_73799.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_73800_75695.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_75696_75959.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_75960_76007.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_76008_76691.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_76692_76991.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_76992_77099.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_77100_78803.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_78804_79259.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_79260_79391.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_79392_80231.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_80232_80747.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_80748_82247.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_82248_84491.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_84492_85583.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_85584_88271.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_88272_88943.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_88944_89111.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_89112_89171.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_89172_89315.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_89316_89363.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_89364_90935.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_90936_92207.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_92208_93431.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_93432_96155.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_96156_96239.png re_publica_2017___Yes__I_said_cyber__Digital_security_and_rights_in_international_development_coop_y_96240_96305.png