powers necessary for the investigation and prosecution of offenders and promote greater
law enforcement cooperation. We encourage all states to adopt suitable legislation. In
addition, the NCA works with international partners to build worldwide capability and
capacity, housing national bureaux for Interpol and Europol and seconding officers to both
organisations. We are also committed to tackling child sexual exploitation online and the UK
will be the home for the new secretariat of the joint WePROTECT/The Global Alliance
Against Child Sexual Abuse Online organisation
The United Kingdom takes a strong lead in developing and sharing best practice, experience
and information with regard to cyber security. This plays an important part of both the formal
and ad-hoc dialogues the UK holds with bilateral partners on cyber security, which continued
to grow in number and substance over the past year. Recognising the importance of multistakeholder approaches, we have also played an active role in the IGF’s Best Practice
Forum on cybersecurity and in relevant discussions at ICANN.
The United Kingdom Cyber Security Capacity Building Programme, delivered by the Foreign
and Commonwealth Office, has a history of building cyber resilience around the world and
will provide additional support over the next five years. Over the past four years, the UK has
invested over £9.38m in efforts to increase cyber resilience around the world, helping more
than 50 countries to improve their cyber security, reducing their own vulnerability to cyber
harm and by extension the UK’s. This support included national cyber security capacity
assessments, public awareness raising, and advice on regulation, better industry standards,
cybercrime exercises, law enforcement training and strengthening Computer Security
Incident Response Teams. The programme has used and promoted UK private sector
expertise, which underpins our multi-stakeholder approach.
With UK programme assistance, 49 countries have now conducted national cyber security
capability self-assessments, using a model designed by government funded Oxford Global
Cyber Security Capacity Centre. Several of these countries have gone on to develop
national cyber security strategies, using the findings of the self-assessments. The success
of the UK self-assessment approach has led other donors to adopt it. In 2016-17, the World
Bank decided to expand their use of Oxford’s self-assessment model with lending partners
and the Oceania Centre in Melbourne agreed to support self-assessments in Asia Pacific.
We welcome the decision by several countries, including Germany, Singapore and Australia,
to start new capacity building programmes.
“Relevant international concepts aimed at strengthening the security of global
information and telecommunications system.”
The United Kingdom supports consensus agreements of the previous UN GGEs that existing
international law applies in cyberspace. We see the discussion of and development of
normative behaviour and the operationalisation of CBMs as the key approach to shaping
responsible state behaviour in cyberspace – we believe any attempts to conclude
comprehensive treaties or similar instruments would not positively enhance cyber security at
present. It will be important to build on the cumulative recommendations contained in UN
GGE 2013 and 2015 reports to help take the debate forwards.
We reaffirm our commitment to a free, open, peaceful and secure cyberspace. The
foundation for responsible state behaviour in cyberspace is our mutual commitment to
existing international law, including the respect for human rights and fundamental freedoms,
and the application of international humanitarian law to cyber operations in armed conflict.
We reaffirm that the UN Charter applies in its entirety to state actions in cyberspace,
including the prohibition of the use of force (Article 2(4)), the peaceful settlement of disputes
(Article 33), and the inherent right of states to act in self-defence in response to an armed
attack (Article 51). The law of state responsibility applies to cyber operations in peacetime,
7