Legal Aspects of Cybersecurity Artur Appazov

11
 
General Recommendations 
There are two major areas that are in need of governmental attention at the moment: (i) 
development of comprehensive and clear policies on cybersecurity, and (ii) development 
and adoption of relevant legislation supporting the policy that would enhance 
cybersecurity. 
The considerations of the policy is of utmost importance and should include first and 
foremost long-term educational efforts on all levels of society including general education 
on cybersecurity matters, as well as professional education of law enforcement, judiciary 
and legislative authorities. Also, an important component of a viable policy is promoting 
international discussion on the issues cybersecurity and its management on an 
international level.
While international cooperation is necessary, each nation will have to develop, as a 
foundation, its own national cybersecurity strategy, authorities, and capabilities. Within 
any given nation state, adequate cybersecurity will require effective coordination and 
cooperation among governmental entities on the national and sub-national levels as well as 
the private sector and civil society.
From the crime prevention and criminal justice perspective, six key areas may benefit from 
either binding or non-binding guidance at international or regional level: (i) 
criminalization; (ii) law enforcement procedural powers; (iii) procedures regarding 
231
Id. at, 69. 

---

67 
electronic evidence; (iv) state jurisdiction in cybercrime criminal matters; (v) international 
cooperation in cybercrime criminal matters; and (vi) the responsibility of service 
providers. 
Issues for consideration in the area of private sector involvement include: What are the 
most effective means to promote effective coordination and cooperation at the national 
level? To what extent should cooperation of the private sector be legally compelled? What 
incentives or subsidies may promote cooperation? How far should governments go in 
regulating the private sector in the name of improving cybersecurity? What is the role of 
civil liability systems in addressing cyber-vulnerabilities? As governments seek to develop 
their own national policies and structures for cybersecurity, questions include: Which 
agency or ministry should have the lead? What should be the role of civilian agencies 
versus national security agencies? What should be the roles of law enforcement or national 
security agencies versus the roles of ministries for trade, commerce, or communications?

---

68