2015 ASEAN REGIONAL FORUM WORK PLAN ON SECURITY OF AND IN THE USE OF INFORMATION AND COMMUNICATIONS TECHNOLOGIES The outcome of the review shall be endorsed by ARF Senior Officials’ Meeting and be approved by Ministers. IMPLEMENTATION This Work Plan sets out activities which participants have identified as meeting the purpose and objectives of the plan. These activities will be implemented in accordance with ARF practices and procedures under which ARF participants put forward a concept paper for consideration and approval by the ARF Inter-sessional Support Group on Confidence Building Measures and Preventive Diplomacy, by ARF Senior Officials and ARF Foreign Ministers. Each implementation activity will have an ASEAN and a non-ASEAN host. Concept papers will set out the parameters of the activity. Participants taking forward an activity will be responsible for arranging financing. Lead countries, co-sponsors and participants are invited to bring forward concept papers, selected from the list of activities, and to implement the Work Plan. New proposals for activities are also welcomed. The sharing of information by ARF Participating Countries in connection with an activity will be voluntary. PROPOSED ACTIVITIES 1) Establish an open ended Study Group on Confidence Building Measures to reduce the risk of conflict stemming from the use of ICTs. The Group will comprise ARF Members. The Study Group could submit consensus reports recommending confidence building measures, drawing on previous ARF discussions and reviewing relevant work in other regional and international forums, taking in account the suggested activities set out in this Work Plan. - The Study Group should develop processes and procedures for sharing information between ARF contact points on preventing ICT crises, and criminal and terrorist use of ICTs; establishment of a contacts database (without duplicating existing CERT networks). 2) Conduct workshops and seminars for ARF Participating Countries. The focus of these workshops and seminars, which would support the work of the Study Group, could include the following: i. the voluntary sharing of information on national laws, policies, best practices and strategies as well as rules and regulations related to security of and in the use of ICTs as well as the procedures for this sharing of information; ii. discussion exercises involving cooperation among ARF participating countries, on how to prevent incidents related to security of and in the use of ICTs becoming regional security problems; iii. conduct of surveys on lessons learnt in dealing with threats to the security of and in the use of ICTs and creation of ARF databases on potential threats and possible remedies, taking into account the work that is already done in the commercial computer security sector and in the CERT community in this regard; iv. capacity building related to security of and in the use of ICTs and to combating criminal use of the internet; v. promotion of and cooperation in research and analysis on issues relevant to security of and in the use of ICTs; vi. discussion on rules, norms, and principles of responsible behaviour by ARF Participating Countries and the role of cultural diversity in the use of ICTs; UNOFFICIAL TEXT · CENTRE FOR INTERNATIONAL LAW · www.cil.nus.edu.sg Page 2 of 4