UN OEWG on ICTs Side Event: Cyber Incident Detection, Response and Recovery: Priorities for Capacity Building

Co-hosted by the GCSCC and UK Mission to the United Nations, this session will examine how cyber incident response aligns with each pillar of the framework: the threat landscape, norms, international law, confidence building measures (CMBs), and capacity building.

The Third Annual Progress Report of the OEWG agreed that future ICT security discussions at the UN will address the framework on responsible state behaviour in cyberspace in an “integrated, policy-oriented and cross-cutting” manner. The details of how this will be operationalised in future are still to be agreed among member states at the OEWG.

This side event provides an opportunity for participants to think critically about how the framework may guide states and stakeholders when responding to the ‘policy’ question of cyber incident response. Cyber incident response is an issue of importance to all states and numerous elements of the framework are relevant to this topic. 

Guiding Questions:

  • How can our understanding of existing and potential threats enhance our response to incidents, and vice versa?

  • What voluntary and non-binding norms are relevant for the victims of cyber incidents?

  • What binding rules of international law could be relevant when evaluating a cyber incident?

  • How do confidence building measures, such as Points of Contact Directories or CERT-to-CERT networks, improve international cooperation on incident response?

  • What capacity-building measures best enhance incident management? 

State and non-state representatives will share their perspectives on these questions and bridge experiences of Incident Management and the UN Framework, demonstrating its practical value and deepening understanding among attendees.

Register here by Thursday 28th of November 2024.