14 Overview Of Existing Confidence Building Measures As Applied To Cyberspace 2013 Global Forum on Cyber Expertise Global Forum on Cyber Expertise Participating States will, at the level of designated national experts, meet at Participating States, on a voluntary basis, will encourage, facilitate and/ least three times each year, within the framework of the Security Committee or participate in regional and subregional collaboration between legally- and its Informal Working Group established by Permanent Council Decision authorized authorities responsible for securing critical infrastructures No. 1039 to discuss information exchanged and explore appropriate development of CBMs. Candidates for future consideration by the IWG may to discuss opportunities and address challenges to national as well as Communication trans-border ICT networks, upon which such critical infrastructure relies. include inter alia proposals from the Consolidated List circulated by the Collaboration may, inter alia, include: Chairmanship of the IWG under PC.DEL/12/682 on 9 July 2012, subject to • Sharing information on ICT threats; discussion and consensus agreement prior to adoption. • Exchanging best practices; • Developing, where appropriate, shared responses to common challenges Participating States will, on a voluntary basis, share information and facilitate including crisis management procedures in case of widespread or inter-State exchanges in different formats, including workshops, seminars, transnational disruption of ICT-enabled critical infrastructure; and roundtables, including on the regional and/or subregional level; this is to 2016 • investigate the spectrum of co-operative measures as well as other processes • of conflict stemming from the use of ICTs. Such activities should be aimed • peaceful use of ICTs. With respect to such activities participating States are • • Sharing national views of categories of ICT-enabled infrastructure States Improving the security of national and transnational ICT-enabled critical infrastructure including their integrity at the regional and subregional encouraged, inter alia, to: Conduct such activities in the spirit of enhancing inter-State co- Preparedness consider critical; at preventing conflicts stemming from the use of ICTs and at maintaining • Adopting voluntary national arrangements to classify ICT incidents in terms of the scale and seriousness of the incident; and mechanisms that could enable participating States to reduce the risk 2016 Overview Of Existing Confidence Building Measures As Applied To Cyberspace levels; and Preparedness • Raising awareness about the importance of protecting industrial control operation, transparency, predictability and stability; systems and about issues related to their ICT-related security, and the Complement, through such activities, UN efforts and avoid duplicating necessity of developing processes and mechanisms to respond to those work done by other fora; and issues. Take into account the needs and requirements of participating States taking part in such activities. Participating States are encouraged to invite and engage representatives of Participating States will, on a voluntary basis, encourage responsible the private sector, academia, centres of excellence and civil society in such reporting of vulnerabilities affecting the security of and in the use of ICTs and activities. share associated information on available remedies to such vulnerabilities, including with relevant segments of the ICT business and industry, with the 2016 Participating States will, on a voluntary basis, conduct activities for officials and experts to support the facilitation of authorized and protected escalation, and conflict; and to clarify technical, legal and diplomatic OSCE participating States agree that such information exchange, when Co-operative occurring between States, should use appropriately authorized and protected communication channels to prevent and reduce the risks of misperception, 2016 goal of increasing co-operation and transparency within the OSCE region. communication channels, including the contact points designated in line Communication mechanisms to address ICT-related requests. This does not exclude the use with CBM 8 of Permanent Council Decision No. 1106, with a view to avoiding duplication. of the channels of communication mentioned in Permanent Council Decision No. 1106. Subsequently, the OSCE’s focus has shifted from developing additional CBMs towards ensuring that all states properly implement the existing ones through practical support. This includes the use of the OSCE Communications Network “to Participating States will, on a voluntary basis and consistent with national 2016 legislation, promote public-private partnerships and develop mechanisms to exchange best practices of responses to common security challenges stemming from the use of ICTs. Preparedness address security of and in the use of information and communication technologies […] upon the identification of contact centers/points for cyber/ICT security-related communications within capitals.”11 Several of these initiatives can be seen as complementing and taking forward the work being done at the UN GGE; others however may even generate ideas which have yet to be covered by UN GGE reports. 11 OSCE, FSC.DEC/5/17, Use of the OSCE Communications Network to Support Implementation of Permanent Council Decisions No. 1039, No. 1106 and No. 1202, 19 July 2017, FSC.DEC/5/17, available at: https://www.osce.org/forum-for-securitycooperation/331821?download=true 15