The cyberattack late last year against Sony, attributed by the US government to North Korea, has highlighted the issue of international norms — especially those related to impermissible actions in cyberspace and permissible actions in response to them. For the United States to effectively advance norms it must balance secrecy and transparency as well as build and sustain credibility.