16 Overview Of Existing Confidence Building Measures As Applied To Cyberspace Global Forum on Cyber Expertise Global Forum on Cyber Expertise Overview Of Existing Confidence Building Measures As Applied To Cyberspace Confidence Building Measures at ASEAN Regional Forum For example, as an effort to increase ownership and targeted Year Measure implementation, the OSCE launched an “adopt a CBM initiative” within the Informal Working Group in late 2017. the voluntary sharing of information on national laws, policies, best practices and strategies as well 2015 as rules and regulations related to security of and in the use of ICTs as well as the procedures for this sharing of information; States that formally ‘adopt’ a CBM bring forward proposals on how to advance its respective implementation, use or impact within the OSCE community. Furthermore, with the purpose of promoting, 2015 assisting and fostering the implementation process of existing cybersecurity CBMs, in 2016, the OSCE launched a project that aims to identify and prioritize national implementation challenges. Within this project, it facilitates the creation of national implementation roadmaps and customized capacity-building assistance plans in co-operation with partners, such as the Global Forum on Cyber Expertise (GFCE). Association of Southeast Asian Nations (ASEAN) and the ASEAN Regional Forum (ARF) focused on incident response and regional coordination in particular. Moreover, under Singapore’s incidents related to security of and in the use of ICTs becoming regional security problems; conduct of surveys on lessons learnt in dealing with threats to the security of and in the use of ICTs and 2015 creation of ARF databases on potential threats and possible remedies, taking into account the work that is already done in the commercial computer security sector and in the CERT community in this regard; 2015 ASEAN has also taken steps in this domain. The ASEAN Regional Forum (ARF) in particular has sought to promote adoption of CBMs since 2012, including through a series of awareness raising workshops. These discussion exercises involving co-operation among ARF participating countries, on how to prevent 2015 capacity building related to security of and in the use of ICTs and to combating criminal use of the internet; promotion of and co-operation in research and analysis on issues relevant to security of and in the use of ICTs initiative, the ASEAN Cyber Capacity Program was launched in 2016 to support cyber norms and CBMs in the region. Prior to that, in 2015, the ARF agreed a work plan on CBMs, and in 2017 launched an open-ended Study Group on 2015 2015 Confidence Building Measures12 to reduce the risk of conflict 2015 raising awareness for non-technical personnel and policy makers on threats in the use of ICTs and methods for countering such threats of ICTs including, inter alia, co-operation between law enforcement agencies and legal practitioners, possible joint task force between countries, crime prevention and information sharing on possible regional co-operation mechanism The Study Group was tasked with developing processes and procedures for sharing information between ARF contact points on preventing ICT crises, and criminal and terrorist use of ICTs and with the 2015 CBMs rose to the top of the cyber security agenda, resulting in a formal endorsement of the 11 norms recommended by the UN GGE 2015 report during the ASEAN Ministerial Conference on Cybersecurity (AMCC) in September 201813. the role of cultural diversity in the use of ICTs; measures to promote co-operation among ARF Participating Countries against criminal and terrorist use stemming from the use of ICTs. establishment of a contacts database. As a result, through a series of ministerial meetings, norms and discussion on rules, norms, and principles of responsible behaviour by ARF Participating Countries and discussion on the terminology related to security of and in the use of ICTs to promote understanding of different national practices and usage; consideration of establishment of senior policy Point of Contacts between ARF Participating Countries to 2015 facilitate real time communication about events and incidents in relation to security of and in the use of ICTs of potential regional security significance; and consideration of establishment of channels for online information sharing on threats in ICT space, global 12 https://cil.nus.edu.sg/wp-content/uploads/formidable/14/2015-ARF-WP-on-ICT-Security.pdf 13 “The Rise of the Regionals: How Regional Organisations Contribute to International Cyber Stability Negotiations at the United Nations Level”, Nikolas Ott and Anna-Maria Osula, 2019, “2019 11th International Conference on Cyber Conflict: Silent Battle”, NATO CCD COE Publications, Tallinn. https://ccdcoe.org/uploads/2019/06/Art_18_The-Rise-of-the-Regionals.pdf 2015 ICT incidents and sources of ICT attacks threatening critical infrastructure, and development of modalities for real time information sharing (leveraging activities conducted by CERT networks). 17