India’s lead on cyber space governance
As the newest global commons, cyber space is anarchic in nature, with no formal comprehensive governance framework. The interconnectedness of cyber space, the low cost of launching a cyber attack, and the invisibility of cyber, makes it difficult to pinpoint the perpetrator with certainty. This is currently the great challenge to the global security establishment’s traditional notions of deterrence. Cyber attacks are on the rise, and now the dominant focus for international security, since the distinction between state and non-state actors has blurred.
Few attempts have been made by states in the last few years to create a global governance framework for cyber space. The most prominent is the UN Group of Governmental Experts (GGE) process, begun in 2004. But fundamental disagreements between the major powers – U.S., Russia and China – on how to manage cyber space have stymied the process of regulating cyber space, and the GGE collapsed in 2017 amidst disputes over applicability of specific international law principles for cyber space.
In this global backdrop of flux, India is making a play to define a framework for the governance of cyber space. New Delhi’s Ministry of External Affairs and Ministry of Electronics and Information Technology are stepping up their cyber diplomacy through four endeavours: creation of cyber norms, managing internet governance, promoting the digital economy and emphasis on capacity-building.
1. Creation of cyber norms: India is entering this global commons through its historically active experience and involvement in international arms control and disarmament negotiations – an area where developing countries were often unheard and where India has often led. In cyber space, India has both advantages – a unique digital profile and a relatively high internet user base (estimated at over 400 million and expected to reach nearly 1 billion by 2021 – as also the disadvantages of its peer nations –a lack of infrastructure and low internet speeds. Like other developing countries, India’s concerns in cyberspace reflect both the ‘pull’ of economic development (beneficiary of the free flow of data) and the ‘pressure’ of national security (concern with ever-increasing cyber attacks). This positions India as a legitimate representative for shaping the new cyber norms and their global governance.
So far, India has participated in the UN GGE process, where it advocated developing a common understanding on responsible state behaviour in cyber space and the adoption of confidence-building measures by states to address cyber threats, cyber terrorism and cyber crimes.
India has supported other non-governmental efforts such as the Global Conference on Cyber Space (hosted in New Delhi in November 2017) and the Global Commission on the Stability of Cyberspace, both of which are developing cyber norms. The newest effort comes from the UN Secretary General, António Guterres, who has set up a High-level Panel on Digital Cooperation, headed by China’s Jack Ma (Alibaba Group) and the U.S.’ Melinda Gates (Bill & Melinda Gates Foundation). It will identify policy, research and information gaps, and propose ways to strengthen global digital cooperation. India is represented by Amandeep Singh Gill, a diplomat, who is an ex-officio member of this panel.
2. Managing Internet governance: This is an area where the global community has found some success, attributed in part to the controversial revelations of whistle-blower Edward Snowden, about the U.S. National Security Agency’s espionage and surveillance activities in 2014.
Here, India has been playing a positive role. Between 2014-16, the U.S. gave up its control of the Internet Corporation for Assigned Names and Numbers (ICANN), which manages the global internet infrastructure. The U.S. wanted ICANN to be a multi-stakeholder body, incorporating national governments, business, civil society and academia, but Russia and China preferred a multilateral body, controlled by national governments. India announced its support for the multi-stakeholder model in 2016 and has encouraged Russian and Chinese support to the multi-stakeholder model, in particular through the BRICS (Brazil, Russia, India, China and South Africa) forum. This has worked: successive BRICS declarations since 2015 have emphasised the need to involve relevant stakeholders in the evolution and functioning of the internet and its governance.
3. Promoting the digital economy: The G20 focus on global economic governance has resulted in the creation of a Digital Economy Task Force to guide countries through the era of digital transformation. India has been an important contributor to this process through its many domestic programmes: Digital India, the Aadhar national ID project, the BharatNet project. Financial inclusion through the Pradhan Mantri Jan-Dhan Yojana a new domestic payments system RuPay all resting on an indigenously-developed and exportable digital infrastructure called IndiaStack. These initiatives from a developing country are important at a time when the technology global majors are persuading governments to curtail ‘net neutrality’ – open and equal access to internet, which India has emphasised as non-negotiable. In July 2018, New Delhi announced the draft National Digital Communications Policy, which upholds net neutrality. India’s non-discriminatory approach is in sharp contrast to the U.S. where net neutrality has faced setbacks in recent months, and China, which despite a robust e-commerce market, still controls the internet through the state.
4. Emphasis on capacity-building: The key to tackle cyber threats and regulate cyber affairs is building capacity. In the last few years, as part of its cyber diplomacy, India has had bilateral cyber dialogues with eight countries and two organisations (European Union and Association of Southeast Asian Nations). These have included wide-ranging exchanges on Information Technology (IT) training programmes for India, threats posed by cyber crimes, cooperation between national Computer Emergency Response Teams (CERTs) and R&D in cyber security. India is also harnessing its IT expertise and share its cyber knowledge, through bilateral agreements and MoUs with other developing countries like Bangladesh, Tunisia, Vietnam (see table below). There is also interest from countries like Rwanda, Morocco and Sri Lanka on replicating India’s Aadhar-based national identity card project and the IndiaStack technology infrastructure.
These efforts are coalescing into an Indian vision for global cyber governance that will have greater resonance with developing countries that are just starting on the path of national digital transformation.
Origin: https://bit.ly/2w0nlZp