In 2016, we affirmed that, under some circumstances, cyber activities could
amount to the use of force or an armed attack within the meaning of the United
Nations Charter and customary international law. We also recognized that
States may exercise their inherent right of individual or collective self-defense
as recognized in Article 51 of the United Nations Charter and in accordance
with international law, including international humanitarian law, in response to
an armed attack through cyberspace;
To increase predictability and stability in cyberspace, we call on States to
publicly explain their views on how existing international law applies to States’
activities in cyberspace to the greatest extent possible in order to improve
transparency and give rise to more settled expectations of State behavior;
We believe that confidence building measures on States’ use of ICTs are also an
essential element to strengthen international peace and security. We continue to
support the development and implementation of such practical CBMs,
including communication channels among States for crisis management, in
relevant bilateral, regional and multilateral forums, including the Organization
for Security and Cooperation in Europe (OSCE) and the ASEAN Regional
Forum (ARF);
In addition, we support the promotion of voluntary, non-binding norms of
responsible State behavior in cyberspace during peacetime, which can reduce
risks to international peace, security and stability. Such norms do not seek to
limit or prohibit any action that is otherwise consistent with international law.
Nor do norms limit a State’s obligations under international law, including with
regard to human rights. Norms reflect the current expectations of the
international community, set standards for responsible State behavior, and
allow the international community to assess the activities and intentions of
States. Norms can help to prevent conflict in the ICT environment and
contribute to its peaceful use to enable the full realization of ICTs to increase
global social and economic development.
The following voluntary, non-binding norms of State behavior during
peacetime were articulated in the 2015 GGE report and the 2015 G20 Leaders’
Communiqué:
1.
Consistent with the purposes of the United Nations, including to
maintain international peace and security, States should cooperate in
developing and applying measures to increase stability and security in
the use of ICTs and to prevent ICT practices that are acknowledged to be
harmful or that may pose threats to international peace and security;
2.
In case of ICT incidents, States should consider all relevant information,
including the larger context of the event, the challenges of attribution in
the ICT environment and the nature and extent of the consequences;
3