of critical infrastructure, and should take appropriate measures to protect their critical infrastructure from ICT threats. (E) Countries should not conduct or knowingly support malicious international activity that, contrary to international law, harms the information systems of authorized emergency response teams (sometimes known as computer emergency response teams or cybersecurity incident response teams ) or related private sector companies of another country. (F) Countries should identify economic drivers and incentives to promote securely-designed ICT products and to develop policy and legal frameworks to promote the development of secure internet architecture. (G) Countries should respond to appropriate requests for assistance to mitigate malicious ICT activity aimed at the critical infrastructure of another country emanating from their territory. (H) Countries should not restrict cross-border data flows or require local storage or processing of data. (I) Countries should protect the exercise of human rights and fundamental freedoms on the Internet and commit to the principle that the human rights that people have offline enjoy the same protections online. 4. Department of State responsibilities (a) Office of Cyber Issues Section 1 of the State Department Basic Authorities Act of 1956 ( 22 U.S.C. 2651a ) is amended— (1) by redesignating subsection (g) as subsection (h)