On August 24 to 25, 2015, the operational level staffs of the National Computer network Emergency Response technical Team/Coordination Center of China (CNCERT/CC), Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) and Korea Internet Security Center (KrCERT/CC), assembled in Tokyo, Japan to hold the third China-Japan-Korea CSIRT Annual Meeting for Cybersecurity Incident Response, hosted by JPCERT/CC.

         This annual meeting is held under the agreement of the "JOINT MEMORANDUM OF UNDERSTANDING ON COMPUTER SECURITY INCIDENT RESPONSE TEAM WITH NATIONAL RESPONSIBILITY" signed by the three parties in 2011. This year’s meeting marked the third occasion, following the 2013 meeting in Shanghai and 2014 meeting in Seoul.

        The meeting provided a prime opportunity to review the joint incident handling operations and prevention efforts concerning significant cross-border incidents relating to the three countries. Furthermore, with the presence of staffs with advanced technical knowledge, the parties also captured an opportunity to share and discuss issues on the latest trends in cyber threats.

        Following the outcome of last year’s meeting, one of the key achievements this year was the evaluation of joint emergency incident handling cases using evaluation metrics, which effectively proved that the cases were handled successfully in a timely and appropriate manner.

        At the conclusion of the meeting, the parties reassured to enhance the existing cooperation by:

    • engaging in ongoing efforts to improve cyber health, including malware cleanup, through sharing of Indicators of Compromise (IOC), cyber risk condition measurement and mitigation action,

    •  further exploring each party’s capacity and approach to incident handling,

    • seeking further opportunities for face-to-face and/or online meetings and trainings. 

        The meeting ended on a successful note along with an interim agreement to have the next annual meeting hosted by CNCERT/CC in summer 2016.