Argument: Internet regulation is necessary to ensure a safe internet  Citizens, corporations, and public organizations face several security threats when online: critical infrastructure systems can be hacked, like the energy transport system, [1] citizens can fall victim to identity theft, [2] and phishing, [3] whereby hackers gain access to bank accounts or other sensitive information. Specifically, it seems that the public sector is attacked the most. [4]  In response to cyber-threats like these, many governments have set up Computer Emergency Response Teams (CERTs), Incident Response and Security Teams (IRTs), or Computer Security and Incident Response Teams (CSIRT; the fact that we haven’t settled on a fitting acronym yet shows how much it is still a novel phenomenon): agencies that warn citizens and organizations alike when a new threat emerges and provides a platform for (the exchange of) expertise in methods of preventing cyber-threats and exchanging information on possible perpetrators of such threats. Oftentimes, these (inter)governmental agencies provide a place where private CSIRTs can also cooperate and exchange information. [5]  These agencies provide a similar function online as the regular police provides offline: by sharing information and warnings against threats, they create a safer world.  [1] ‘At Risk: Hacking Critical Infrastructure’. 2012.  [2] ‘Identity theft on the rise’. 2010.  [3] ‘Phishing websites reach all-time high’. 2012.  [4] ‘Public sector most targeted by cyber attacks’. 2012.  [5] see for example the About Us page of the US-CERT or the About the NCSC page of the Dutch CERT

Counterargument: e internet freedom politics government digital freedoms freedom Internet regulation isn’t an effective and legitimate means to create a safe internet  Setting up CERTs aren’t an effective means to create a safer internet, because most of the threats are a result of ‘social engineering’, which means that hackers use social cues to con people into believing frauds. People usually fall for this because of their own gullibility and naïveté, like in Nigerian email scams. [1] The most effective means of combating these threats is to educate citizens directly, the FBI already does this with Nigerian email scams. [2] People and corporations are primarily responsible for their own actions, which includes taking care of their own internet security by obtaining anti-virus software, and which also includes corporations making sure their websites are safe to use or else face liability charges if they turn out not to be.  Moreover, CERTs are illegitimate. They are illegitimate because they facilitate the sharing of information on specific persons across private and public organizations and because they are hard to control democratically. For example: the US-CERT is an agency residing under the department of Homeland Security. Through the sharing of information with private parties, these private parties, unwittingly, run the risk of becoming one of the government’s watch dogs. Moreover, this sharing of information is hard to control democratically: much of the information could be classified as secret, which means that citizens have no way of verifying whether public and private organizations are complying with data sharing regulations.  [1] Plumer, ‘Why Nigerian email scams are so crude and obvious’. 2012.  [2] FBI, ‘Nigerian letter or “419” fraud’.