Australia is a member of the Wassenaar Arrangement, which promotes transparency, exchanges of views and information, and greater responsibility in transfers of conventional arms and dual-use goods and technologies with military applications. (j) States should encourage responsible reporting of ICT vulnerabilities and share associated information on available remedies to such vulnerabilities to limit and possibly eliminate potential threats to ICTs and ICTdependent infrastructure; (k) States should not conduct or knowingly support activity to harm the information systems of the authorized emergency response teams (sometimes known as computer emergency response teams or cybersecurity incident response teams) of another State. A State should not use authorized emergency response teams to engage in malicious international activity. See also (j) below. ASD has developed and implements a Responsible Release Principles for Cyber Security Vulnerabilities This norm imposes a negative obligation. Australia does not conduct or knowingly support activity to harm the information systems of the authorized emergency response teams (sometimes known as computer emergency response teams (CERT) or cybersecurity incident response teams (CSIRT)) of another State. Australia does not use its national CERT to engage in malicious international activity. Australia’s commitment to act in accordance with this norm is demonstrated by:  Public statements that Australia will act in accordance with the 2015 UNGGE norms and reports of the UNGGE (see: eg: Australia’s International Cyber Engagement Strategy or Australia-China High Level Dialogue Joint Statement)  Public statement about the conduct and authorisation of Australia’s offensive cyber capabilities, which are always consistent with ASD’s obligations at domestic and international law, and subject to a comprehensive review and oversight framework (see, eg: Mike Burgess, Director-General ASD, speech to the Lowy Institute, Offensive cyber and the people who do it; or Conduct and Authorisation of Offensive Cyber Capability in Support of Military Operations; or information published on the Accountability page on ASD’s website).  Its active participation in – and support for – regional and international CERT and incident response communities, including APCERT, PacSCON, the Forum of Incident Response Security Teams (FIRST), and others. www.dfat.gov.au/cyberaffairs esafety.gov.au/parents