ANNEX C HOW AUSTRALIA ADVANCES INTERNATIONAL CYBER STABILITY THROUGH CONFIDENCE-BUILDING MEASURES To enhance trust and cooperation and to reduce the risk of conflict, the 2013 and 2015 UNGGE Reports (A/68/98 and A/70/174 respectively) recommended states consider a number of Confidence Building Measures (CBMs) (extracted in table below). As recognised in the UNGGE reports, CBMs promote trust among states, helping to reduce the risk of conflict by increasing inter-state cooperation, and promoting transparency, predictability and stability. CBMs comprise transparency measures, risk reduction measures and cooperative measures. They are one of the most important tools in states’ diplomatic toolkits to strengthen international peace and security and maintain a peaceful and stable online environment. Australia is committed to partnering internationally to implement the CBMs recommended in the UNGGE Reports; below is a non-exhaustive list of Australia’s efforts in this regard. 1. Transparency Measures provide insights into a country’s activities. a. b. c. Australia’s 2016 Cyber Security Strategy, 2016 Defence White Paper, 2017 Foreign Policy White Paper, and 2017 International Cyber Engagement Strategy together with its 2019 Progress Report are all examples of Australian transparency measures, as they clearly explain our goals, vision and planned actions. In its 2017 International Cyber Engagement Strategy (Strategy), Australia committed to periodically publish its position on the application of international law to state conduct in cyberspace. The first such publication appeared in Annex A to the Strategy, and was supplemented in 2019 by a second publication, which further elaborates Australia’s position on applicable international law. By publishing these views, Australia seeks to promote common understanding, increase predictability, foster trust and reduces the risk of miscommunication during times of crisis. To foster trust, Australia has publicly outlined the legal framework and review mechanisms that apply to the conduct and authorisation of its offensive cyber capabilities in support of military operations (see: the Strategy, page 55). Australia’s acknowledgment of its offensive cyber capabilities does not contradict its commitment to a peaceful and stable online environment. Rather, by being transparent about the legal frameworks and review mechanisms that govern their use, Australia sends an unambiguous message that states’ activities in cyberspace have limitations and are subject to obligations, just as they are in the physical domain. Australia urges all countries to be transparent and unequivocal in their commitment to develop and use ICTs in accordance with domestic and international law, as well as agreed norms of responsible state behaviour. www.dfat.gov.au/cyberaffairs esafety.gov.au/parents