ANNEX B AUSTRALIAN IMPLEMENTATION OF NORMS OF RESPONSIBLE STATE BEHAVIOUR IN CYBERSPACE The international community – including the five permanent members of the United Nations (UN) Security Council (UNSC), and the UN General Assembly (UNGA) – have agreed a framework for responsible state behaviour in cyberspace (the Framework). The Framework affirms the application of existing international law to state conduct in cyberspace and articulates agreed norms of responsible state behaviour, while also recognising the need for confidence building measures, and coordinated capacity building. The 2010, 2013 and 2015 reports of the United Nations Group of Governmental Experts (UNGGE) set out this framework (A/65/201; A/68/98; A/70/174). The UNGA subsequently considered – and endorsed, by consensus – the reports of the UNGGE (A/RES/65/41; A/RES/68/243; A/RES/70/237). Notably, in 2015, the UNGA called on all UN Members states ‘To be guided in their use of information and communications technologies by the [UNGGE’s] 2015 report’. Many regional groups and leaders meetings have subsequently endorsed the UNGGE’s reports (including, but not limited to: G20 2015, ASEAN Leaders’ Statement 2018; ASEAN Communications Ministers 2018; EAS Leaders Statement 2018; CHOGM Declaration 2018). Given this repeated high-level endorsement, it is clear that the international community expects countries to act consistently with the conclusions in the UNGGE reports. Australia reaffirms its commitment to act in accordance with the cumulative UNGGE reports from 2010, 2013 and 2015 (A/65/201; A/68/98; A/70/174). With the intent of deepening common understandings and thereby increasing predictability and stability, this Fact Sheet contains a non-exhaustive list of the ways in which Australia observes the eleven norms in the 2015 UNGGE report. This Fact Sheet should be read in conjunction with the cumulative reports of the UNGGE. Other resources include the International Security Chapter of Australia’s International Cyber Engagement Strategy, Australia’s position on how international law applies to state conduct in cyberspace (2017) as supplemented by the 2019 International Law Supplement, as well as information on Australia’s $34 million Cyber Cooperation Program. Norm (a) Consistent with the purposes of the United Nations, including to maintain international peace and security, States should cooperate in developing and applying measures to increase stability and security in the use of ICTs and to prevent ICT practices that are How Australia Observes the Norm Australia engages bilaterally, regionally and multilaterally to develop and apply measures to increase stability and security in the use of ICTs and to prevent ICT practices that are harmful or that may pose threats to international peace and security. A full overview of its activities can be found in the International Security Chapter of the 2019 Progress Report on implementation of Australia’s International Cyber Engagement Strategy. Of particular note: at the UN, we are active participants of both the UN Group of Governmental Experts (UNGGE) and UN Open Ended Working www.dfat.gov.au/cyberaffairs esafety.gov.au/parents

Select target paragraph3