International Telecommunications Union (ITU)

States members of the regional, sub-regional or multilateral organization.

Policy

Relevant Strategy Documents, Other Documents, and Communications.

Strategy Documents

Official documents of the intergovernmental organization designed to outline the policy plans, priorities, and principles in cybersecurity and cybersecurity-related matters.

ITU National Cybersecurity Strategy Guide

Focuses on the issues that countries should consider when elaborating or reviewing national cybersecurity strategies

Source

September 2011

Global Cybersecurity Agenda

ITU Secretary-General

• Framework for international cooperation aimed at enhancing confidence and security in the information societ;

• Built upon five strategic pillars: (1) legal measures, (2) technical and procedural measures, (3) organizational structures, (4) capacity building, (5) international cooperation.

Source

2007 (launched in)

Other Documents

Guideline documents that lay out common approaches, frameworks, best practices etc. pertaining to cyber policy.

QUESTION 22-1/1: Securing information and communication networks: best practices for developing a culture of cybersecurity

Telecommunication Development Sector (ITU-D)

Report of Study Group 1 activities, including:

• a guide for the establishment of a national cybersecurity management system;

• best practices for the creation of public-private partnerships in support of cybersecurity goals and objectives;

• building a national computer security incident management capability;

• managing a national CIRT with critical success factors;

• best practices for Internet Service Provider (ISP) network protection

Source

2014

Understanding Cybercrime: Phenomena, Challenges and Legal Response

Telecommunication Development Sector (ITU-D)

Report assists countries in understanding what cybercrime is about, what the challenges are in fighting such crime and supports them in drafting policies and laws.

Source

2014

Overview of Cybersecurity Information Exchange

Telecommunication Standardization Sector (ITU-T)

Provides overview of Cybersecurity Information Exchange Techniques (CYBEX) initiative that imports more than twenty “best of breed” standards for platforms developed over the past several years by government agencies and industry to enhance cybersecurity and infrastructure protection

Source Source 2

2011

Cybersecurity Guide for Developing Countries

ICT Applications and Cybersecurity Division, Telecommunication Development Sector (ITU-D)

Prepared for facilitating the exchange of information on best practices, related to cybersecurity issues and to meet the stated goal of the Global Cybersecuriry Agenda

Source

2009

Communications

Statements distributed by organizations and/or organizational agencies outlining positions, commitments, action plans, obligations etc. in the area of cyber policy.

Guide to Developing a National Cybersecurity Strategy: Strategic Engagement in Cybersecurity

ITU, the World Bank, Commonwealth Secretariat, Commonwealth Telecommunications Organisation, NATO CCD COE

• Co-publication aiming to guide national policy-makers in the development of a national cybersecurity strategy;

• Provides an overview of a strategy development lifecycle, overarching principles for a strategy, focus areas and good practices, and supporting reference materials.

Source

2018

Global Cybersecurity Index

Telecommunication Development Sector (ITU-D)

Multi-stakeholder initiative to measure the commitment of countries to cybersecurity (see entry in "Activities")

Source

July 2017

ITU National Cybersecurity/CIIP Self-Assessment Tool (Draft)

ICT Applications and Cybersecurity Division, Telecommunication Development Sector (ITU-D)

Intended to assist national government officials in examining their related existing national cybersecurity/CIIP policies, procedures, norms, institutions, and relationships

Source

April 2009

Structure

Relevant Specialized Agencies and Key Positions.

Specialized Agencies

The official nodal agencies within the organization established or proposed to be established and designated with responsibilities for supporting processes related to cyber policy matters.

United Nations Group on Cybercrime and Cybersecurity

ITU, UNODC

• To address programme policy aspects of the work and to foster coordination and collaboration within the United Nations system
• Offered report to the High-Level Committee on Programmes at its 28th session in November 2014

Source

17 October 2013

ITU Regional Cybersecurity Centre

ITU Arab Regional Cybersecurity Centre (ITU-ARCC)

• Physical centres hosted by an ITU Member State to act as the regional ITU focal point for cybersecurity issues as well as deliver ITU’s cybersecurity services to all partner countries within the agreed regional scope
• First centre set up in Oman

Source

3 March 2013

ITU-T Study Group 17

Telecommunication Standardization Sector (ITU-T)

• Responsible for building confidence and security in the use of information and communication technologies (ICT)
• Currently working on cybersecurity; security management; security architectures and frameworks; among others.

Source

2017-2020 (current study period)

Legislation

Regulations and Directives.

Cooperation

Relevant Meetings, Activities, and External Cooperation.

Meetings

Conferences and dialogues related to cyber policy matters carried out by the regional, sub-regional or multilateral organization.

World Summit on the Information Society (WSIS) Forum

ITU, UNCTAD, UNDP, UNESCO

Key forum for discussing the role of ICTs as a means of implementation of the Sustainable Development Goals and targets, beginning in 2006

Source

20-21 March 2018

ITU-ENISA Regional Cybersecurity Forum

ITU; ENISA

Platform for strengthening regional cooperation, information sharing, and discussion on cybersecurity with particular focus on national cyber security strategies and national CSIRT/CIRT/CERT in terms of development approaches, good practices, challenges and opportunities.

Source

29-30 November 2016

Regional Cybersecurity Summit (5th)

ITU Arab Regional Cybersecurity Centre (ITU-ARCC)

Regional Cybersecurity Summit and FIRST Arabic and African Regional Symposium, focusing on the cooperation in cybersecurity as one of the key pillars to tackle the complexity and the scalability of the main challenges of today's cyber threats.

Source

30 October-1 November 2016

World Conference on International Telecommunications

Conference convened to review and revise the International Telecommunication Regulations (ITRs), which are a treaty that complements the ITU Constitution and Convention, and establish general principles about international telecommunications

Source

December 2012

World Summit on the Information Society (WSIS)

ITU, High-Level Summit Organizing Committee (HLSOC), Executive Secretariat (WSIS-ES)

• Featured adoption of a Declaration of Principles for achieving an information society; the Tunis Commitment and Tunis Agenda for the Information Society, and the creation of the Internet Governance Forum

Source

16-18 November 200510-12 December 2003

Activities

Joint exercises, training programs, and other initiatives related to cyber policy matters undertaken by the organization.

"Combatting Cybercrime: Tools and Capacity Building for Emerging Economies" Toolkit

ITU, UNCTAD, UNICRI, UNODC

Includes resources aimed at building capacity among policy-makers, legislators, public prosecutors & investigators, and civil society in developing countries in the policy, legal and criminal justice aspects of the enabling environment to combat cybercrime

Source

2016

Global Cybersecurity Index

Telecommunication Development Sector (ITU-D)

• Multi-stakeholder initiative to measure the commitment of countries to the ITU's Global Cybersecurity Agendathrough surveys;

• Aims to instigate international cooperation and promote knowledge exchange on this topic;

• Iterations of the project result in reports (third iteration currently in progress).

Source

2013-2014 (first iteration)

United Nations Group on Cybercrime and Cybersecurity

ITU, UNODC

• To address programme policy aspects of the work and to foster coordination and collaboration within the United Nations system

• Offered report to the High-Level Committee on Programmes at its 28th session in November 2014

Source

17 October 2013

CIRT Programme

Telecommunication Development Sector (ITU-D)

• Helps countries to establish their national computer incident response team, which serves as a national focus point for coordinating cybersecurity incident response to cyber attacks in the country;

• Established 14 National CIRTs.

Source

External Cooperation

Legally binding and non-legally binding agreement(s) and initiatives related to cyber policy matters undertaken by the organization with non-member States and other organizations.

Global Forum on Cyber Expertise, Member

A global platform for countries, international organizations and private companies to exchange best practices and expertise on cyber capacity building

Source

2015 (established)