Role of ITU in building confidence and trust in the use of ICTs

• Cyberthreats and attacks give rise to ever-growing security challenges for both the public and private sectors in all countries. Cybersecurity-related incidents can compromise the availability, integrity and confidentiality of information transiting on networks and disrupt the operations and functioning of critical infrastructures. They can also compromise the security of people and whole countries.
  
• In increasingly digital societies, cyber-incidents may have greater impact in the physical world on infrastructure connected to the public Internet. They can impact countries’ economic and social development, compromising the integrity of critical information and comm​unication infrastructures (including emergency services, water supplies and power grids, food distribution chains, aircraft and shipping, navigation systems, industrial processes and supply, healthcare, public transportation and government services).
• Attacks can be mounted from any part of the world, and they can transcend borders. It is often stated that cybersecurity is only as strong as its weakest link. Therefore, countries need to work together to achieve a minimum appropriate level of security capacity, so weak links can be identified and strengthened.
  

​​

ITU serves as a platform for global dialogue, helping its Member States and membership in setting security-related international standards, helping countries define cybersecurity strategies and set up computer incident response teams (CIRTs), protecting children online, building human capacity and facilitating policy dialogue.

• ITU assists Member States in developing and improving effective national cybersecurity frameworks or strategies. At the national level, cybersecurity is a shared responsibility which requires coordinated action for prevention, preparation and response on the part of government agencies, authorities, the private sector and civil society. To ensure a safe, secure and resilient digital realm, a comprehensive national framework or strategy is necessary.
• In 2008, ITU launched the Child Online Protection (COP) Initiative, a multi-stakeholder effort which works towards creating a safe and empowering online experience for children around the world. In cooperation with diverse partners, ITU has been providing guidance and building capacities in various countries - involving policy-makers, parents, educators and children.
• ITU issues the Global Cybersecurity Index (GCI) which sheds light on the commitment of ITU Member States to cybersecurity to create a safe space for Internet users in their country.
• Effective mechanisms and institutional structures are necessary at the national level to reliably deal with cyberthreats and incidents. ITU assists Member States in establishing and enhancing National Computer Incident Response Teams (CIRTs).  In response to the fast-evolving technologies and manifestation of related threats, incident response must be continuously updated and improved.
• ITU conducts regional and national cyberdrills to strengthen national and international cooperation among ITU Member States against cyberthreats and cyberattacks. To date, ITU has conducted cyberdrills involving over 100 countries.
• ITU study groups provide a neutral, global platform for ITU members to develop international standards addressing security. ITU-T Study Group 17 is the lead ITU group for security, mandated to 'build confidence and security in the use of ICTs'. The group develops global security architectures and frameworks supporting authentication and identity management, security aspects of communication applications, cybersecurity, the protection of personally identifiable information, and more. Topics of growing significance to the group's work include security aspects of intelligent transport systems, distributed ledger technologies such as blockchain, and quantum information technologies.
  
• To maximize impact, ITU is working closely with partners from international organizations, the private sector, industry associations and academia, including e.g. the World Economic Forum and Interpol.​​​​
  

---

[​1] A cyberthreat is a potential malicious act that seeks to damage data, steal data, or disrupt digital life in general, irrespective of whether it actually occurs or succeeds.