Sentences now range from one to three years, but countries such as Estonia, France, Germany and the U.K. have longer ones, he said.The updated framework may also recommend that countries respond to a request for help in a cybercrime investigation from other countries faster, such as within eight hours.