A/70/174
support capacity-building in less developed countries. The 2013 report called upon
the international community to work together in providing assistance to: improve
the security of critical ICT infrastructure; develop technical skills and appropriate
legislation, strategies and regulatory frameworks to fulfil their responsibilities; and
bridge the divide in the security of ICTs and their use. The present Group also
emphasized that capacity-building involves more than a transfer of knowledge and
skills from developed to developing States, as all States can learn from each other
about the threats that they face and effective responses to those threats.
21. Continuing the work begun through previous United Nations resolutions and
reports, including General Assembly resolution 64/211, entitled “Creation of a
global culture of cybersecurity and taking stock of national efforts to protect critical
information infrastructures”, States should consider the following voluntary
measures to provide technical and other assistance to build capacity in securing
ICTs in countries requiring and requesting assistance:
(a) Assist in strengthening cooperative mechanisms with national computer
emergency response teams and other authorized bodies;
(b) Provide assistance and training to developing countries to improve
security in the use of ICTs, including critical infrastructure, and exchange legal and
administrative best practices;
(c)
security;
Assist in providing access to technologies deemed essential for ICT
(d) Create procedures for mutual assistance in responding to incidents and
addressing short-term problems in securing networks, including procedures for
expedited assistance;
(e) Facilitate cross-border cooperation to address critical infrastructure
vulnerabilities that transcend national borders;
(f)
efforts;
Develop strategies for sustainability in ICT security capacity -building
(g) Prioritize ICT security awareness and capacity-building in national plans
and budgets, and assign it appropriate weight in development and assistance planning.
This could include ICT security awareness programmes designed to educate and
inform institutions and individual citizens. Such programmes could be carried out in
conjunction with efforts by international organizations, including the United Nations
and its agencies, the private sector, academia and civil society organizations;
(h) Encourage further work in capacity-building, such as on forensics or on
cooperative measures to address the criminal or terrorist use of ICTs.
22. The development of regional approaches to capacity-building would be
beneficial, as they could take into account specific cultural, geographic, political,
economic or social aspects and allow a tailored approach.
23. In the interest of ICT security capacity-building, States may consider forming
bilateral and multilateral cooperation initiatives that would build on established
partnership relations. Such initiatives would help to improve the environment for
effective mutual assistance between States in their response to ICT incidents and
could be further developed by competent international organizations, including the
15-12404
11/17