powers necessary for the investigation and prosecution of offenders and promote greater law enforcement cooperation. We encourage all states to adopt suitable legislation. In addition, the NCA works with international partners to build worldwide capability and capacity, housing national bureaux for Interpol and Europol and seconding officers to both organisations. We are also committed to tackling child sexual exploitation online and the UK will be the home for the new secretariat of the joint WePROTECT/The Global Alliance Against Child Sexual Abuse Online organisation The United Kingdom takes a strong lead in developing and sharing best practice, experience and information with regard to cyber security. This plays an important part of both the formal and ad-hoc dialogues the UK holds with bilateral partners on cyber security, which continued to grow in number and substance over the past year. Recognising the importance of multistakeholder approaches, we have also played an active role in the IGF’s Best Practice Forum on cybersecurity and in relevant discussions at ICANN. The United Kingdom Cyber Security Capacity Building Programme, delivered by the Foreign and Commonwealth Office, has a history of building cyber resilience around the world and will provide additional support over the next five years. Over the past four years, the UK has invested over £9.38m in efforts to increase cyber resilience around the world, helping more than 50 countries to improve their cyber security, reducing their own vulnerability to cyber harm and by extension the UK’s. This support included national cyber security capacity assessments, public awareness raising, and advice on regulation, better industry standards, cybercrime exercises, law enforcement training and strengthening Computer Security Incident Response Teams. The programme has used and promoted UK private sector expertise, which underpins our multi-stakeholder approach. With UK programme assistance, 49 countries have now conducted national cyber security capability self-assessments, using a model designed by government funded Oxford Global Cyber Security Capacity Centre. Several of these countries have gone on to develop national cyber security strategies, using the findings of the self-assessments. The success of the UK self-assessment approach has led other donors to adopt it. In 2016-17, the World Bank decided to expand their use of Oxford’s self-assessment model with lending partners and the Oceania Centre in Melbourne agreed to support self-assessments in Asia Pacific. We welcome the decision by several countries, including Germany, Singapore and Australia, to start new capacity building programmes. “Relevant international concepts aimed at strengthening the security of global information and telecommunications system.” The United Kingdom supports consensus agreements of the previous UN GGEs that existing international law applies in cyberspace. We see the discussion of and development of normative behaviour and the operationalisation of CBMs as the key approach to shaping responsible state behaviour in cyberspace – we believe any attempts to conclude comprehensive treaties or similar instruments would not positively enhance cyber security at present. It will be important to build on the cumulative recommendations contained in UN GGE 2013 and 2015 reports to help take the debate forwards. We reaffirm our commitment to a free, open, peaceful and secure cyberspace. The foundation for responsible state behaviour in cyberspace is our mutual commitment to existing international law, including the respect for human rights and fundamental freedoms, and the application of international humanitarian law to cyber operations in armed conflict. We reaffirm that the UN Charter applies in its entirety to state actions in cyberspace, including the prohibition of the use of force (Article 2(4)), the peaceful settlement of disputes (Article 33), and the inherent right of states to act in self-defence in response to an armed attack (Article 51). The law of state responsibility applies to cyber operations in peacetime, 7

Select target paragraph3