Transnational Threats Department Cyber/ICT Security What is cyber/ICT security? The Organization for Security Building confidence in • Five co-operative meas- cyberspace ures adopted in 2016, and Co-operation in Europe which further address In 2012, an open-ended effective communication (OSCE) plays a pioneering role Informal Working Group channels, public-private in enhancing cyber/ICT security, (IWG) was established under partnerships (PPPs), critical infrastructure protection and the auspices of the Security in particular by reducing the Committee (Permanent Council the sharing of vulnerability Decision No. 1039). The IWG information (Permanent risks of conflict stemming has the mandate to elab- Council Decision No. 1202). from the use of Information orate CBMs to enhance The 16 cyber/ICT security inter-State co-operation, Communication Technologies transparency, predictability CBMs aim to build multilayered and stability. relationships based on (ICTs) by its participating States. openness and co-operation The work of the IWG has led and lay a foundation for the to the adoption of two sets of peaceful resolution of disputes The use of ICTs by states To address this issue, OSCE CBMs for cyberspace: in cyberspace. Whilst the has had a profound impact participating States have measures are non-binding, on foreign relations, shaping developed and adopted two • Eleven transparency all 57 participating States how states interact, influence sets of cyber/ICT security measures adopted in have made a political and engage with each other confidence-building 2013, which promote cyber commitment to adhere to in cyberspace. This added measures (CBMs) to reduce resilience and preparedness, them. complexity has increased the the risks of conflict stemming encourage communication likelihood of misperception, from the use of ICTs by states. and increase transparency escalation and tension. (Permanent Council Decision No. 1106)
Cyber/ICT security Points of Contact network meeting. Vienna, Austria OSCE gathers experts to discuss minimizing vulnerabilities in cyber/ICT (OSCE/Ruzica Stojicic Bencun) security. Istanbul, Türkiye (OSCE/Seher Ciplak) The role of the OSCE Secretariat The OSCE Secretariat’s space and technical briefings as offer opportunities for closer on the protection of critical co-operation and joint action. Transnational Threats Department infrastructure. In addition to its in-person activ- (TNTD) assists participating ities, TNTD has also developed A particular focus of TNTD’s States in their implementation of cyber/ICT security activities a series of online products ac- cessible to the general public, cyber/ICT security CBMs. is the operationalization of the CBM 8 points of contact such as reports and e-learning courses. One such course network, which connects TNTD organizes a range of include sub-regional training has been specifically devel- designated national points oped to raise awareness of activities to develop national events on the importance of capacities to address cyber- CBMs, training courses on of contact into a community OSCE efforts in cyberspace security threats, as well as international cyber diplomacy, of cyber experts. Such tools and provide a detailed over- promote regional co-operation workshops on the applicability enable rapid communication view of each of the Organi- and resilience. These activities of international law in cyber- in case of emergencies as well zation’s 16 CBMs.
Expected learning Certificated offer: Language: OSCE e-learning effort: 2 hours Certificate of English, platform: (self-paced) completition French, Russian elearning.osce.org Supporting United Nations efforts CBMs are an important element of the international framework of Through a network of national offices and national capacity- responsible state behaviour in cyberspace, which was developed building efforts, the OSCE has extensive insight into the at the United Nations (UN). As such, OSCE efforts in cyberspace specific needs and concerns of its participating States. As are closely interlinked with the work of the UN in this area. As a such, it plays an important role in informing the UN processes regional organization, the OSCE acts as an implementer of by providing feedback on the practical implementation of UN UN-level agreements through practical and action-oriented work. recommendations.
2023 marked the tenth anniversary of the adoption of the first set of OSCE cyber/ ICT security CBMs. The OSCE launched a publication which serves as a collection of OSCE experience in the development and implementation of such measures, presenting examples of best practices and key results. It describes efforts across the OSCE area and highlights key examples of the OSCE Secretariat’s work in the field.
Selected reading and courses:
OSCE reports: E-learning courses:
Emerging Practices in Cyber Incident Classification: OSCE Cyber/ICT security OSCE Cyber/ICT security Cybersecurity-Related A Report on Emerging Confidence-Building CBM 16: Coordinated Public-Private Partnerships Practices within the OSCE Measures Vulnerability Disclosure and Collaboration in OSCE region participating States
Follow OSCE OSCE Secretariat Transnational Threats Department Wallnerstrasse 6 1010 Vienna, Austria
cybersec@osce.org https://www.osce.org/secretariat/cyber-ict-security