A/75/123 reduced, transferred or avoided. To reduce the risk, they can select and apply security measures, or consider innovation and preparedness measures. Accordingly, in case of ICT incidents, Colombia considers all relevant information, including the larger context of the event, the challenges of attribution in the ICT environment, and the nature and extent of the consequences. With regard to the characterization of incidents and their mandatory reporting to the competent authorities, the Commission for the Regulation of Communications, in defining categories of information security incidents in decision No. 5569 of 2018, also took into account the guidelines and best practices set forth in the 27000 series of standards developed by the International Organization for Standardization and the International Electrotechnical Commission (in particular the categories identified in standard No. 27035-1). Under that decision, when information security incidents occur, communications network and service providers are requir ed to send an electronic report to the Computer Emergency Response Group of Colombia after containment, eradication and recovery. In line with the recommendation that States should not knowingly allow their territory to be used for internationally wrongful acts using ICTs, the State of Colombia prevents and responds to cybersecurity incidents of all classifications and types throughout the country through the Digital Security Committee, whose members include State cybersecurity entities such as the Computer Emergency Response Group of Colombia, the Joint Cyber Command, the Cyber Police Centre and the Government’s computer security incident response team. Colombia seeks to cooperate at the international level through information exchange, mutual assistance, the prosecution of the terrorist and criminal use of ICTs, and the implementation of other cooperative measures to address thr eats. In that regard, the new National Council for Economic and Social Policy document on digital trust and security, which is being developed, provides for the establishment and implementation of a cyberinformation exchange system aimed at facilitating the dissemination of indicators of compromise among stakeholders which interact in the digital environment at the national and in ternational levels. This system will be aligned with the single, central registry for digital security incidents. The Attorney General’s Office uses international cooperation channels in accordance with bilateral and multilateral agreements. However, a secure technological channel or web service needs to be established in order to enable it to directly consult and obtain information from Internet service providers, most of which are private, so that requests for mutual legal assistance can be sent, receive d, exchanged, considered, and responded to in a timely manner. Under the current mechanisms, response times are slow, hinderi ng criminal proceedings. When the response is received, the investigation is often at a stage at which it is unfeasible to use the outcome in the proceedings. The National Intelligence Directorate has been coordinating with intelligence agencies in certain countries on developing a process for exchanging operational information in a timely manner, and for requesting additional info rmation relating to specific incidents which require investigation or confirmation. This coordination concerns additional information relating to incidents or trends identified in cyberspace for which the correlation of events or activity histories is required in order to monitor hostile actors that operate in cyberspace. The Constitutional Court of Colombia has issued a number of judgments which relate to the recommendation that, in ensuring the secure use of ICTs, States should respect Human Rights Council resolutions 20/8 and 26/13 on the promotion, 18/84 20-08285

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents