EU Statement – UN Global Mechanism on ICTs in international security: First Substantive Session Key EU messages for Agenda item on Capacity building

As set-out in the final OEWG 2021-2025 report, cyber capacity building is a priority of the international community and should continue to be a central issue under the Global Mechanism, complementing the efforts at regional and bilateral level, as well as with the multi-stakeholder community.

Currently, many developing and emerging economies lack the technical expertise, and institutional policies and frameworks necessary to address cyber threats effectively.

This not only undermines their digital development, but also impacts international security and stability.

Therefore, the work under the Global Mechanism should enable exchanges that allow for the identification of an evolving list of concrete gaps and needs for cyber capacity building efforts, as well as facilitate recipients and donors, including from the multi-stakeholder community, to connect.

The aim should be to translate the UN framework of responsible state behaviour in cyberspace into practical cybersecurity measures to enhance national resilience, and to implement cyber capacity building projects on this basis on the ground.

States can contribute to this by identifying the gaps, seek coordination and cooperation for effective delivery of capacity building and by sharing their national best practices on how they implement the UN framework of responsible state behaviour in into their regional and national frameworks.

Such exchanges should take place in DTG2 and could take into account the exchanges in DTG1 on best practices and concrete cybersecurity measures needed at national level to address cyber threats, and on the effective application of international law, voluntary norms and CBMs in the context of specific challenges.

Further discussions could take place in the Plenary and DTG2, including on broader questions related to cyber capacity building as a policy.

These discussions could include the further development of a Digital Tool to support States' implementation of the UN framework building on the Voluntary Norms implementation Checklist; the role of multi-stakeholder community in the design and delivery of cyber capacity building; on the role of regional organisations in ensuring effective coordination; or on how to best mainstream the agreed ICT security capacity-building guidelines as adopted in the 2021 OEWG report into relevant ICT security cyber capacity building programming.

Also, the Global Roundtable on Capacity Building could play a role in ensuring enhanced coordination and cooperation, for instance by bringing together capacity building implementers for exchange of information and best practices, feeding into the discussions in the Plenary and DTG2.

The EU and its Member States will aim to avoid duplication with discussions between the Plenary, DTG2 and the Global Roundtable, and pursue a streamlined approach.

The EU has significantly invested in cyber capacity building over recent years and will continue to do so over the coming years, working on cyber capacity building projects with partners in all regions.

Currently, in addition to EU Member States individual projects and initiatives such as the Global Gateway, the EU is working with partners on 27 projects, with a value of a 140 million EUR, and we will continue to invest, recognizing capacity building as an essential pillar of security and stability in cyberspace, as well as our partnerships.

Furthermore, the EU and Member States will continue to promote coordination and cooperation, including with international organizations and other stakeholders such as industry, civil society and academia to ensure meaningful allocation of scarce resources, and to deliver capacity building activities in an effective and sustainable manner.

The Global Mechanism is the unique opportunity to ensure we enhance global cyber resilience, by translating the UN framework into concrete national cybersecurity measures, and by - based on this - delivering cyber capacity building that is inclusive, needs-based and grounded on equal partnerships.