Shaping the Future of Cybersecurity and Digital Trust Cybercrime Prevention Principles for Internet Service Providers January 2020 World Economic Forum 91-93 route de la Capite CH-1223 Cologny/Geneva Switzerland Tel.: +41 (0)22 869 1212 Fax: +41 (0)22 786 2744 Email:
[email protected] www.weforum.org © 2020 World Economic Forum. All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, including photocopying and recording, or by any information storage and retrieval system. 1 Cybercrime Prevention: Principles for Internet Service Providers Contents Preface 3 Foreword 4 Executive Summary 5 Incentives for Action and Expected Outcomes 6 Context – Scale of the Threat 7 Principle 1. Protect consumers by default from widespread cyberattacks and act collectively with peers to identify and respond to known threats 8 1.1 What challenge does this principle address? 8 1.2 How can this principle create impact? 8 1.3 Recommendations for implementation 10 Principle 2. Take action to raise awareness and understanding of threats and support consumers in protecting themselves and their networks 11 2.1 What challenge does this principle address? 11 2.2 How can this principle create impact? 12 2.3 Recommendations for implementation 14 Principle 3. Work more closely with manufacturers and vendors of hardware, software and infrastructure to raise minimum levels of security 16 3.1 What challenge does this principle address? 16 3.2 How can this principle create impact? 16 3.3 Recommendations for implementation