A/75/123 International cooperation on security matters, and the use of innovation, science and technology to strengthen defence sector capacities, have been incorp orated into the strategic transformation objectives of the policy guidelines for defence and security. Colombia engages in diplomacy in the areas of cybersecurity and cyberdefence within the framework of cooperative security through strategic internation al partnerships. For example, it exchanges knowledge as a global partner of the North Atlantic Treaty Organization and, under the Individual Partnership Cooperation Programme, is enhancing the capacities of the national military forces and their coordinated efforts to address threats and protect cyberspace. Colombia has also developed guidelines on the basis of international best practices and standards for the establishment and operation of computer security incident response teams for the private, public and mixed public-private sectors, in order to ensure the operational management of cybersecurity incidents which affect national interests; promote cooperation, collaboration and international assistance in digital security, cybersecurity and cyberdefence with members of computer security incident response teams in the Americas and in Europe; and exchange experiences and best practices. For its part, the Joint Cyber Command participates in the Ibero -American Cyberdefence Forum in order to advance cooperation, share lessons learned, strengthen capacities to manage transnational risks and threats in cyberspace, and take part in national and international exercises. Through the Cybersecurity Capacities Centre of Colombia, the Cyber Police Centre carries out analysis, issues prevention alerts, engages in activities associated with the management of cybersecurity incidents and initiates investigations into cybercrimes. The Commission for the Regulation of Communications has the following objectives: (a) developing mechanisms to promote cooperation on digital security between communications service providers and the Computer Emergency Response Group of Colombia; (b) centralizing sectoral information on information security incidents within the entity responsible for managing such information; and (c) providing the Response Group with the information necessary to manage and raise awareness of incidents for the benefit of the various stakeholders. To that end, the Commission for the Regulation of Communications issued decision No. 5569 of 2018, in which it stipulated that every telecommunications network and service provider must implement an information security management system and adjust its processes in order to ensure the integrity, confidentiality and availability of data. It should be noted that the recommendations made by the Organization for Economic Cooperation and Development in the document Digital Security Risk Management for Economic and Social Prosperity have been taken into account in the digital security policy. In that document, the Organization for Economic Cooperation and Development states that digital security risk management should begin with the definition of economic and social objectives or the design of specific activities so that, during the risk management phase, the level of risk associated with the activity may be assessed and any potential impact on economic and social objectives may be determined. Subsequently, during the risk treatment phase, stakeholders should determine how strategies should be modified to increase the likelihood of success of the activity and preserve the established objectives, by deciding whether the risk should be taken, 20-08285 17/84