UNCLASSIFIED Page 2 of 5 New Zealand acknowledges the risks presented by cybercrime, and by other online harms, but urges the Group’s report to focus on state behaviour online, noting the existence of other avenues – including under UNODC auspices – for international efforts addressing cybercrime. Norms, Rules and Principles for Responsible State Behaviour New Zealand thinks that raising awareness and supporting implementation of existing norms of responsible state behaviour online as outlined in previous UNGGE reports is one of the most practical and achievable outcomes the OEWG can deliver. There are different ways in which this awareness-raising and implementation may be carried out:  We are aware of several countries that have developed written outlines of how they have implemented the norms of responsible state behaviour online. The OEWG’s report could encourage other states to do the same.  We could recommend that regional organisations give consideration to how they may support awareness-raising and implementation of existing norms.  We could encourage states to ensure norm awareness, understanding and implementation is a feature of cyber security capacity-building programmes. New Zealand does not rule out elaboration of further norms at some point in the future. At this stage, however, this Group’s energy is best focused on achieving progress in areas where we can find consensus, and make practical, meaningful steps forward. On norms, this means focusing, for now, on the implementation of existing commitments. Cyber stability is not threatened as a result of the absence of norms, or the lack of a framework of responsible state behaviour online. It is threatened because some states are not abiding by the commitments we have all made. To this end, a focus on implementation and a reaffirmation of our intent to abide by our commitments better serves international cyber stability at this stage. International Law New Zealand reaffirms its view – and that endorsed by the General Assembly – that international law applies online as it does offline. There are no gaps in international law in cyberspace. Existing international law provides an effective toolkit to regulate state conduct online, identify breaches of international law online, attribute state responsibility for those breaches, and guide responses from victim states. We acknowledge, however, that there is work to be done to crystallise precisely how existing international law applies online and to secure greater consensus on this INTS-37-1285 UNCLASSIFIED