CONVENTION ON INTERNATIONAL INFORMATION SECURITY ...
2 of 7
http://www.mid.ru/en/foreign_policy/official_documents/-/asset_publish...
information, as well as the misuse of such systems, networks, and information by ensuring the
punishment of such actions, detailed in this Convention, and in the granting of sufficient
authority to effectively fight such offenses through the tracking, exposure, and investigation of
such offenses on an internal and international level, and through the development of agreements
on efficient and reliable international cooperation,
keeping in mind the necessity of ensuring the appropriate balance between maintaining
law and order and protecting fundamental human rights, as foreseen in the 1966 International
Covenant on Civil and Political Rights, as well as other international human rights agreements,
which assert the right of each individual to freely hold his or her own ideas, and to freely
express these ideas and opinions, including the freedom to seek, receive, and distribute any kind
of information or idea, regardless of national borders,
keeping in mind also the right to a private life and the protection of personal data,
taking into account the 1989 United Nations Convention on the Rights of the Child, and
the Convention concerning the prohibition and immediate action for the elimination of the worst
forms of child labour, passed by the General Conference of the International Labour
Organization in 1999,
welcoming recent events enabling the further growth of international understanding and
collaboration in the struggle against illegal activity in the information space, including measures
undertaken by the United Nations, the Shanghai Cooperation Organization, the European
Union, the Asia-Pacific Economic Cooperation organization, the Organization of American
States, the Association of Southeast Asian Nations, the Organisation for Economic
Co-operation and Development, the Group of Eight (G8), and other international organizations
and forums, have agreed to the following:
Chapter 1. MAIN CLAUSES
Article 1. Subject and aim of the Convention
The subject that this Convention seeks to regulate is the activity of governments to ensure
international information security.
The aim of this Convention is to act against the use of information and communication
technology to violate international peace and security, as well as to set up measures ensuring
that the activity of governments in the information space will:
1) further general social and economic development;
2) be carried out in such a way as to be compatible with efforts to support international
peace and security;
3) correspond to generally accepted principles and norms of international law, including
principles of peacefully regulating conflicts and disagreements, abstaining from the use of
force, not interfering in internal issues, and respecting fundamental human rights and freedoms;
4) be compatible with the right of each individual to seek, receive, and distribute
information and ideas, as is affirmed in UN documents, while keeping in mind that this right
may be restricted through legislation to protect the national and social security of each State, as
well as to prevent the wrongful use of and unsanctioned interference in information resources;
5) guarantee the free exchange of technology and information, while maintaining respect
for the sovereignty of States and their existing political, historical, and cultural specificities.
Article 2. Terms and definitions
The following terms and definitions are used for this Convention:
"access to information" - the possibility of receiving and using information;
"information security" - a state in which personal interests, society, and the government
are protected against the threat of destructive actions and other negative actions in the
information space;
"information warfare" - conflict between two or more States in the information space
with the goal of inflicting damage to information systems, processes, and resources, as well as
to critically important structures and other structures; undermining political, economic, and
social systems; carrying out mass psychological campaigns against the population of a State in
order to destabilize society and the government; as well as forcing a State to make decisions in
the interests of their opponents;
"information infrastructure" - the total complex of technical means and systems of the
formation, conversion, transfer, use, and storage of information;
"information system" - the total amount of information stored in a database and the
technology used to support the processing of that information;
"information weapon" - information technology, means, and methods intended for use in
information warfare;
"information space" - the sphere of activity connected with the formation, creation,
conversion, transfer, use, and storage of information and which has an effect on individual and
social consciousness, the information infrastructure, and information itself;
"information and communication technologies" - the total amount of methods,
production processes, and programming and technical elements, integrated with the goal of
forming, converting, transferring, using, and storing information;
"information resources" - an information infrastructure, as well as the information itself
and the flow of that information;
"confidentiality of information" - the mandatory requirement that a party granted access
to certain information will not transfer this information to a third party without the agreement of
the owner;
"critically important part of the information infrastructure" - a part (element) of an
information infrastructure, actions against which could have consequences directly connected to
national security, including the security of individuals, society, and the government;
"international information security" - a state of international relations that excludes the
possibility of breaks in global stability or the creation of threats to the security of governments
and the global community in the information space;
"the misuses of information resources" - the use of information resources without the
necessary rights, or which involves a violation of existing regulations, national legislation, or
international legal norms;
"unsanctioned interference in information resources" - illegal action affecting the
processes of forming, processing, converting, transferring, using, and storing information;
"information system operator" - an individual citizen or corporation whose runs an
information system, including the processing of information contained in its database;
7/19/2017 4:45 PM