22 • Overview Of Existing Confidence Building Measures As Applied To Cyberspace Global Forum on Cyber Expertise Global Forum on Cyber Expertise VII BRICS Summit Ufa Declaration23 • Overview Of Existing Confidence Building Measures As Applied To Cyberspace “The need for all the member states to continue with their efforts to establish and/or strengthen national alert, monitoring, and response groups for cybersecurity incidents, known as Computer • • “In that context, the Working Group of Experts of the BRICS Security Incident Response Teams (CSIRTs); The importance of the member states participating in States on security in the use of ICTs will initiate co- and strengthening the hemispheric security network of the CSIRTs and cybersecurity authorities, operation in the following areas… the establishment of and of the member states increasing their exchanges of information and their co-operation related nodal points in member states;” to the protection of critical information infrastructure and for the prevention of and response to “In that context, the Working Group of Experts of the BRICS cybersecurity incidents;” States on security in the use of ICTs will initiate co-operation in the following areas: sharing of information and best • Joint Statement on Third Annual Nordic-Baltic + U.S. Cyber Consultations25 practices relating to security in the use of ICTs;” • • “In that context, the Working Group of Experts of the BRICS “They provided updates on their respective domestic cybersecurity efforts and discussed the impacts of developments in the European Union, NATO, OSCE, OECD, and the UN, among others.” States on security in the use of ICTs will initiate co-operation in the following areas… intra-BRICS co-operation using the existing Computer Security Incident Response Teams (CSIRT).” • • Strengthening Hemispheric Co-operation and Development in Cybersecurity and Fighting Terrorism in the Americas24 U.S.-Russian Co-operation on Information and Communications Technology Security26 • “To facilitate the regular exchange of practical technical information on cybersecurity risks to critical systems, we are arranging for the sharing of threat indicators between the U.S. Computer • “The importance of creating frameworks and protocols for co-operation and assistance among the Emergency Readiness Team (US-CERT) located in the Department of Homeland Security, and its member states, for when incidents occur in one member state and their effects are felt in others; counterpart in Russia. On a continuing basis, these two authorities will exchange technical Their commitment to creating confidence-building measures that strengthen international peace information about malware or other malicious indicators, appearing to originate from each other’s and security and that can increase co-operation, transparency, predictability, and stability among territory, to aid in proactive mitigation of threats.” • states in the use of cyberspace, recognizing confidence and security building measures as one of • “As we work to create predictability and understanding in the political-military environment, both the lynchpins of collaboration among member states which enhance trust and co-operation and the U.S. and Russian militaries have shared unclassified ICT strategies and other relevant studies reduce the risk of conflict”; with one another.” • “The importance for all the members to create and/or strengthen specialized units within their “The White House and the Kremlin have authorized a direct secure voice communications line relevant law enforcement agencies for the prevention and investigation of cybersecurity incidents; between the U.S. Cybersecurity Coordinator and the Russian Deputy Secretary of the Security Their willingness to provide assistance and training for improving security in the use of information Council, should there be a need to directly manage a crisis situation arising from an ICT security and communications technologies (ICTs), and to share their best technical, legal, and incident. This direct line will be seamlessly integrated into the existing Direct Secure administrative practices to that end; The need to establish procedures for mutual assistance when Communication System (‘hotline’) that both governments already maintain, ensuring that our responding to incidents, in addressing short-term network security problems, and provide leaders are prepared to manage the full range of national security crises we face internationally”. collaboration with the reciprocal requests made by the member countries in order to investigate and prosecute crime related to terrorist acts, including procedures for expediting that assistance”; • “The need for the CICTE Secretariat, within its competencies, in accordance with the 2004 Comprehensive Inter-American Cybersecurity Strategy (the 2004 Strategy and its Appendix A) to continue developing co-operation mechanisms with other international agencies and organizations in order to take coordinated actions for the protection and use of cyberspace;” 23 24 http://brics2016.gov.in/upload/files/document/5763c20a72f2d7thDeclarationeng.pdf http://brics2016.gov.in/upload/files/document/5763c20a72f2d7thDeclarationeng.pdf 25 https://obamawhitehouse.archives.gov/the-press-office/2016/08/23/joint-declaration-increased-security-and-defense-co-operationbetween 26 https://obamawhitehouse.archives.gov/the-press-office/2013/06/17/fact-sheet-us-russian-co-operation-information-andcommunications-techno 23