Global Commission on the Stability of Cyberspace – Towards a cyber stability framework – Pre 07 2019

Consolidated programme 2019 overview

Title: Global Commission on the Stability of Cyberspace: Towards a Cyber Stability Framework

Session teaser

The international cybersecurity regime continues to be in flux. Interstate discussions have attempted, and in some cases managed, to address some of the risks involved. However, attempts to find a workable interstate dialogue seem to have reached an impasse. Governments alone will not be able to fix the problem. Despite their traditional dominance over all questions related to international peace and security, the Internet is governed by a complex ecosystem of stakeholders from the private sector, civil society and government - each with its own set of standards, norms, rules and processes. Given this complex landscape, it is unlikely there can be a singularly encompassing legal solution that is both enforceable and inclusive. Instead, norms of responsible state behavior, confidence building measures, and the application of international law will continue to define cyber stability.

The Global Commission on the Stability of Cyberspace (GCSC) was launched at the 2017 Munich Security Conference to engage the full range of stakeholders to develop proposals for norms and policies to enhance international security and stability and guide responsible state and non-state behavior in cyberspace. By connecting the traditional state-led dialogues on international security with those of the Internet communities, it plays a vital role in defining these international norms and policy initiatives that aim to improve stability in cyberspace.

During this session, the current focus of the Commission will be highlighted, as it develops a definition and underlying principles of cyber stability and addresses gaps in the international cybersecurity architecture. The Commission seeks to solicit feedback from the broader Internet governance community on its recommendations that could be included in the GCSC Report.

Session description

The GCSC Zero-Day event at EuroDIG will convene both international and senior Dutch cybersecurity stakeholders from government, private sector, and civil society to discuss the present and future work of the GCSC and how it may work together with the various international frameworks and initiatives concerning international peace and security in cyberspace. During this session, the current focus of the Commission will be highlighted, as it develops a definition and underlying principles of cyber stability and addresses gaps in the international cybersecurity architecture.

The GCSC’s work has already gained some traction; for example, the Paris Call for Trust and Security in Cyberspace endorses 5 out of 8 GCSC norms and makes special reference to the norm to protect the public core of the Internet. In addition, the public core norm was codified in the proposal for a EU Cybersecurity Act, recently approved by the EU Parliament and Council. Similarly, in response to the UN General Assembly Economic and Social Council Resolution 2006/46, a report of the UN Secretary-General highlights the work of the Commission on norms of responsible behavior for reducing the risks to cyber stability. This is by no means the end of the process. The Commission realizes that further important work must be undertaken by all stakeholders to consolidate and implement the various measures proposed thus far.

The Commission is still deliberating about the content of the recommendations on the wider international peace and security architecture and assessing the best process vehicles for taking the Commission’s long-term strategic vision on the future international cybersecurity architecture forward to assure long-term relevance and impact. Input of the Internet governance community therefore contributes greatly to the mission of the GCSC and serves to help frame the future debate in a meaningful way.

Format

The GCSC event will be conducted in a Panel setting, introduced by short presentations from members of the Commission, followed by interventions from other stakeholders and a discussion with the wider audience. We will be looking to foster a dynamic conversation amongst the panelists and attendees.

A provisional agenda overview is given below:

14:30 – 14:45 Welcome Remarks and Introduction to the GCSC

14:45 – 15:15 Presentations by GCSC Commissioners

• An overview of the GCSC’s past work on norms
• The connection of the GCSC’s work on norms with other initiatives, and endorsements so far
• The current work on a definition and principles for stability in cyberspace
• The Commission’s current thinking on how to best implement its work

15:15 – 15:50 Q&A

15:50 – 16:00 Closing Remarks

Further reading

• GCSC Information Sheet
• GCSC Norms
  • Norm to Protect the Public Core of the Internet and Definition for the Public Core of the Internet, to which the norm applies
  • Norm to Protect Electoral Infrastructure
  • Singapore Norm Package, including:
    • Norm to Avoid Tampering
    • Norm Against Commandeering of ICT Devices into Botnets
    • Norm for States to Create a Vulnerability Equities Process
    • Norm to Reduce Significant Vulnerabilities
    • Norm on Basic Cyber Hygiene as Foundational Defense
    • Norm Against Offensive Cyber Operations by Non-State Actors

People

Until 15 May 2019: Key participants