of research communities, academia, industry, law enforcement, CERTs/ CSIRTs and other cyber protection agencies in ensuring the security of their ICT systems. Consider the exchange of information on ICTs related vulnerabilities and/or harmful hidden functions in ICT products. Work to implement security controls, based in risk management. - j. States should encourage responsible reporting of ICT vulnerabilities and share information on available remedies to such vulnerabilities to limit and possibly eliminate potential threats to ICTs and ICTdependent infrastructure (2015 ¶13(j)). i. To implement this norm, States should: - Establish national structures that enable a responsible reporting and handling of ICT vulnerabilities; - Encourage appropriate coordination mechanisms amongst public and private sector entities; ii. In addition, and to avoid misunderstandings or misinterpretations, including those stemming from non-disclosure of information about potentially harmful ICT vulnerabilities, States are encouraged to share, as appropriate, to the widest possible extent, technical information on serious ICT incidents, by using existing CERT to CERT coordination mechanisms, as well as mechanisms put in place by regional organizations (such as networks of points of contact). States should ensure that such information is handled responsibly and in coordination with other stakeholders, as appropriate. k. States should not conduct or knowingly support activity to harm the information systems of the authorized emergency response teams (sometimes known as computer emergency response teams or cybersecurity incident response teams) of another State. A State should not use authorized emergency response teams to engage in malicious international activity. (2015 ¶13k)). China  States should pledge not to use ICTs and ICT networks to carry out activities which run counter to the task of maintaining international peace and security. State sovereignty in cyberspace     States should exercise jurisdiction over the ICT infrastructure, resources as well as ICT-related activities within their territories. States have the right to make ICT-related public policies consistent with national circumstances to manage their own ICT affairs and protect their citizens’ legitimate interests in cyberspace. States should refrain from using ICTs to interfere in internal affairs of other states and undermine their political, economic and social stability. States should participate in the management and distribution of international Internet resources on equal footings. Critical infrastructure protection    States have the rights and responsibilities regarding legal protection of their critical ICT infrastructures against damage resulting from threats, interference, attack and sabotage. States should be committed to refraining from launching cyber attacks on the critical infrastructures of other states. States should not exploit policy and technical advantages to undermine the security and integrity of critical 15