unidir -解锁裁研所网络政策门户：全面用户指南 Unlocking the UNIDIR Cyber Policy Portal - A Comprehensive User Guide

Unlockingthe

UNIDIR

CyberPolicy

Portal

AComprehensiveUserGuide

1

CYBERPOLICYPORTAL.ORG

Foreword

SinceitslaunchinJanuary2019,theUNIDIRCyberPolicyPortal(CPP)hasdiligentlymappedthecyberpolicylandscapesofall193UNMemberStates,alongsidekeyIntergovernmentalOrganisationsandmulti-stakeholderandotherinitiatives.TherootsoftheCPPextendto2013withpublicationofUNIDIR’sCyberIndex:InternationalSecurityTrendsandRealities.

Originallydesignedtoprovideacomprehensiveoverviewofcyberactivitiesatnational,regional,andinternationallevelsinaperiodofrapidevolutionincybersecuritypolicy,theCyberIndexunderscoredthepressingneedforadynamicdigitalresourcetocontinuous-lyupdatepolicymakerswithinformationoncybersecurityissues.ThisishowthevisionforUNIDIR’sCyberPolicyPortalwasborn.

TheCPPhasgarneredbroadrecognitionacrossUNMemberStates,RegionalOrganisationsaswellasUNprocessesfocusedonInternationalSecurityinICTs.Inanerawherethedigitalandphysicalworldsincreasinglyintersectamidglobaltensions,toolspromotingtransparen-cyandfosteringtrustamongnationsareessential.Drawinguponyearsofdatacollectionanddevelopmentinformedbyconsultationswithpolicymakersandthecybercommunity,theCPPmeetsthisdemandwithadvancedfunctionalitiesdesignedforeasyaccessandavailabilityinallofficiallanguagesoftheUnitedNations.

Wetrustthisbookletwillassistyouinnavigatingthetoolandtakeadvantageofallthegreatfeaturesitoffers.Accessthousandsofconcisesummariescoveringstrategies,policies,legislations,cooperativeinitiatives,andmore.DiveintoarepositoryofhundredsofPDFdocumentsavailableinover50languages,andexploreinsightsintohundredsofcapaci-ty-buildingprojects.Additionally,accesstheSurveyofNationalImplementationofthe2015GGErecommendationstotakestockofyournationalprogressand,ifyousowish,toshareyournationalpracticesthroughyournationalprofileontheCPP,supportingtransparencyandinformationsharing.

Innavigatingtoday’sintricatedigitallandscape,webelievetheUNIDIRCyberPolicyPortalstandsasanessentialtoolforchartingthesecriticalwaters,facilitatingcooperationandtrustincyberspace.

DrGiacomoPersiPaoli

Head,Security&TechnologyProgramme,UNIDIR

3

TableofContents

WherecanIexplorethecybersecuritypolicylandscapeofallUnitedNationsMemberStates?

6

WhatinformationisavailableonthePortal?

7

WherecanIfindinformationaboutnationalcybersecuritystrategiesand7

implementationframeworks?

WherecanIfindinformationaboutthegovernmentagenciesresponsibleforcybersecurity?IsthisavailableonthePortal?

8

WherecanIaccessinformationonwhetheracountryhaspublisheditspositionontheapplicabilityofInternationalLawtocyberspace?

8

Iwouldliketolearnmoreaboutcooperationactivitiesofaspecificcountry.CanIfindthisinformationonthePortal?

9

WherecanIfindinformationaboutpastandcurrentcapacity-buildingprojects?

9

Doyoumapwhichcountriesprovideorreceivecapacity-buildingsupport?

10

WherecanIfindinformationabouttheeffortsofIntergovernmentalOrganisationsincyberspace?

10

I’minterestedinexploringthestrategiesofIntergovernmentalOrganisations.IsthisinformationavailableonthePortal?

11

CanIalsofindinformationonagencyresponsibleforcybersecurityissueswithintheorganisation?

11

DoesthePortalofferinformationontheregulationsanddirectivesadoptedbyIntergovernmentalOrganisationsaspartoftheircyberpolicyefforts?

12

DoesthePortalcontaininformationonthecooperativeinitiatives12

undertakenbytheIntergovernmentalOrganisation?

4

WherecanIlearnmoreaboutMultistakeholderInstrumentsandOtherInitiativesinthecybersphere?

12

DoestheUNIDIRCyberPolicyPortalincludefeaturesforeasyaccesstoinformation?

13

IstheinformationonthePortalavailableinanyotherUNofficiallanguages?13

HowcanIquicklyaccessanoverviewofallstrategiesorcountriesthathavereleasedtheirpositionontheapplicabilityofInternationalLawincyberspace?

14

HowcanIfindspecificdocumentsorinformationonthePortal?

14

IsthereaneasywaytocompareinformationbetweendifferentStatesandIntergovernmentalOrganisationsprofiles?

15

Wouldyouliketoaccesstheprofileinformationoffline?

15

Iwouldliketoshareprofileinformation.Whatisthebestwaytodothis?

15

HowcanIaccessacomprehensiveoverviewofthetypeofinformationavailableonthePortal?

16

DoesthePortalprovidemoreinformationaboutothercybersecuritytools?

16

DoesthePortalprovideaccesstotheNationalSurveyofImplementationofthe2015GGEReportRecommendations?

16

Isitpossibletoanalyseallnationalcybersecuritystrategiesthatmentionaspecificterm?

17

HowdoyoucollecttheinformationonthePortalandhowcanIsubmitupdatesformycountry’sprofileonthePortal?

17

WhoarethedonorsofthePortal?18

5

WherecanIexplorethecybersecuritypolicylandscapeofallUnitedNationsMemberStates?

Launchedin2019,theCyberPolicyPortaloftheUnitedNationsInstituteforDisarmamentResearch(UNIDIR)servesasacomprehensiveonlinereferencetool,providingdetailedprofilesofall193UNMemberStates.Itactsasacentralhubforinformationoneachcountry’scybersecuritypolicydocuments,responsibleagenciesanddepartments,legalframeworks,andcooperationefforts.ThePortaloffersinsightsintothecybersecuritypolicylandscapethroughmaincategoriesandvarioussubcategorieswithineachprofile.ItalsoincludesinformationonIntergovernmentalOrganisations,multi-stakeholderinstruments,andotherinitiatives.Asaconfidence-buildingtool,itseekstofacilitateinformedparticipa-tionbyallrelevantstakeholdersinpolicyprocessesandtoenhancetrust,transparency,andcooperationincyberspace.

TheUNIDIRCyberPolicyPortalisago-toresourceforunderstandingthemultilateralcyberpolicylandscape.Itisnotonlyeasytouseandnavigate,butrichwithinformationtosupportmeaningfulanalysisthatultimately

informsbetterpolicymaking.

KatherinePrizeman,PoliticalAffairsOfficer,

UnitedNationsOfficeforDisarmamentAffairs(UNODA)

6

WhatinformationisavailableonthePortal?

EachcountryprofileonthePortalincludesinformationoncyberpolicylandscapeofthecountrydividedincategories,suchasCybersecurityPolicy,Structures,LegislativeFrame-works,andCooperation.

WherecanIfindinformationaboutnationalcybersecuritystrategiesandimplementationframeworks?

TheCybersecurityPolicycategoryprovidesdetailedinformationoneachcountry’snationalcy-bersecuritystrategiesandpolicies,includingthosecurrentlybeinginthedevelopmentstages.Withinthiscategory,sub-categoriesincludestrategydocuments,officialdocumentsdesignedtooutlinestatepositions,policies,andstrategiestoaddresscybersecurityandcybersecuri-ty-relatedmatters.Additionally,implementationframeworkssubcategoryfeaturesexecutionplansthatStateshaveadoptedtomeettheirnationalcyberpolicyobjectives.Theseframe-worksencompassguidelinedocumentsaswellasstandardsframeworksatthestatelevel.

EversincethelaunchoftheCyberPolicyPortal,Ihavebeenparticularlyimpressedby

theinformationopportunitiesthistoolcanoffercybersecurityexpertsandcybersecuri-tyenthusiasts.IbelievePortalfacilitatestheidentificationofbestpracticesandformu-lationofeffectivecybersecuritystrategies.Moreover,countriesseekingtoenhance

theirnationalpositioninthisfieldcanexplorethetooltofindlessonslearnedaboutbuildingefficientpublicinstitutionswhileincorporatingthelatestcybersecurity

standards.

CorinaMoroi,FirstSecretary,PermanentMissionoftheRepublicofMoldovatotheUnitedNations,NewYork

7

WherecanIfindinformationaboutthegovernmentagenciesresponsibleforcybersecurity?IsthisavailableonthePortal?

OnthePortal,youcanfindinformationaboutrelevantStructures,whichincludeNationalCentersorResponsibleAgencies,KeyPositions,DedicatedAgencies,Departments,andCERTorCSIRT.

ItprovidescomprehensiveinformationontheNationalCentreorResponsibleAgency,whichservesastheprimarynodalentityforformulatingand/orimplementingtheState’scyberpolicy.YouwillalsofinddetailsonKeyPositionspertinenttothecyberpolicyoftheStateanditsimplementation.Additionally,itcoversDedicatedAgenciesandDepartments,includingtheAgencies,Ministries,Departments,andotherentities(andtheirsubdivisions)taskedwithsupportingandimplementingtheState’scyberpolicy.Furthermore,informationisavailableontheNationalComputerEmergencyResponseTeam(CERT)orComputerSecurityIncidentResponseTeam(CSIRT),whicharethedesignatedteamsresponsibleforaddressingcyberse-curitythreatsandincidentsattheStatelevel.

WherecanIaccessinformationonwhetheracountryhaspublisheditspositionontheapplicabilityofInternationalLawtocyberspace?

TheLegalFrameworksectionoutlinesrelevantlegislationofeachcountryandincludestheViewsonInternationalLawcategory,whichdetailstheState’spositionontheapplicationofinternationallawtocyberspace,ifavailable.

8

Iwouldliketolearnmoreaboutcooperationactivitiesofaspecificcountry.CanIfindthisinformationonthePortal?

TheexistingcooperationinitiativesinvolvingaspecificcountryarecategorisedunderCooperation.Thiscategoryfeaturesseveralsubcategories,includingMultilateralAgree-ments,UNprocesses,BilateralandMultilat-eralCooperation,SelectActivities,andinfor-mationonMembershipinIntergovernmentalOrganisations.

TheMultilateralAgreementssubcategoryfeaturesinternationaltreatiesfocusedoncyberpolicyissues.UnderUNProcesses,

youcanexplorekeydialoguesandpolicyprocessesalsorelatedtocybermatters.TheBilateralandMultilateralCooperationsub-categoryprovidesinsightsintobothlegallybindingandnon-legallybindingagree-ments,dialogues,andexercisesconcerningcyberpolicythattheStatehasengagedinwithotherstates.Lastly,theSelectActivi-tiessubcategoryhighlightsspecificactivi-tiesandengagementeffortsundertakenbytheState,suchastrainingsandotherinitia-tivesrelatedtocyberpolicy.

WherecanIfindinformationaboutpastandcurrentcapacity-buildingprojects?

IntheSelectActivitiessubcategoryoftheCooperationsection,thePortalprovidescomprehensiveinformationoncapacitybuildinginitiatives.InadditiontoalreadyexistinginformationonthePortal,italsofeatureshundredsofcapacitybuildingprojectstransferredfromGFCECybilPortaltoUNIDIRCyberPolicyPortal.Theseinitia-tivesareeasilyidentifiablebytheCybillogo

displayedintheirsummaries.Additionally,thePortal’sFilterfeatureallowsuserstospecifical-lysearchforinformationrelatedtocapacitybuildinginitiatives.WeinviteStatestohighlightadditionalcapacitybuildingprojectsthathavebeenimplementedorreceivedbyusingthededicatedsectionontheSurveyofNationalImplementation.

9

Doyoumapwhichcountriesprovideorreceivecapacity-buildingsupport?

TheSelectActivitiesprovidecomprehensivedetailsaboutthecapacitybuildingprojects,indicatingwhetherthecountryisabeneficiaryorafunder.Theinformationalsoincludesacompletelistofboththebeneficiariesandthefundersinvolved.Additionally,itprovidestheproject’sstart

andenddates,alongwithadirectlinktotheinitiative.TheFilterfeaturealsoallowsforeasyaccesstodetailedinformationonthebeneficiariesandfundersoftheseinitiatives.

Capacitybuildingistooimportantforustoworkinduplicativeor

isolatedsilosandthiscooperationservesasamodelforleveragingthe

strengthsofeachofourplatformsandcommunitiestohelpcountriesgettheinformationandhelptheyneed.

ChrisPainter,President,GlobalForumonCyberExpertise(GFCE)FoundationBoard

WherecanIfindinformationabouttheeffortsofIntergovernmentalOrganisationsincyberspace?

TheUNIDIRCyberPolicyPortalalsohostsprofilesforseveralIntergovernmentalOrganisa-tions,suchastheAfricanUnion(AU),theAssociationofSoutheastAsianNations(ASEAN),theEuropeanUnion(EU),theOrganizationofAmericanStates(OAS)andtheUnitedNationsamongothers.

TheUNIDIRCyberPolicyPortalisan

extremelyusefultooltohaveatour

disposal,asitprovideseasyaccesstoagreatdealofrelevantinformation

regardingthegloballandscapeasitrelatestopoliciesandotherdata.

Featuressuchastheinteractivemapthatallowsquickaccesstocountriesand

facilitatesthesearchforotherpartnersarevaluabletoourmemberstatesandtothoseofusattheCybersecurityProgramwithintheInter-AmericanCommittee

againstTerrorism(CICTE)ofthe

OrganizationofAmericanStates(OAS).WecongratulateUNIDIRonthisinitia-tive.

Kerry-AnnBarrett,CybersecurityProgram

Manager,OrganizationofAmericanStates(OAS)

10

I’minterestedinexploringthestrategiesofIntergovernmentalOrganisations.IsthisinformationavailableonthePortal?

TheprofileoftheIntergovernmentalOrgan-isations(IGOs)encompassesdetailedinfor-mationonitsPolicy,Structure,Legislation,andCooperativeefforts.WithinthePolicycategory,theinformationisdividedintothreemaintypesofdocuments:StrategyDocuments,Communications,andOtherDocuments.IntheStrategyDocumentssection,youwillfinddocumentsoutliningIGO’spolicyplans,priorities,andprinciplesin

cybersecurityandcybersecurity-relatedmatters.

TheCommunicationssectionfeaturesstate-mentsfromtheorganisationoritsagencies,detailingpositions,commitments,actionplans,andobligationsrelatedtocyberpolicy.IntheOtherDocumentsyou’llfindguidelinesthatestablishframeworks,ap-proaches,andbestpracticesincyberpolicy.

CanIalsofindinformationonagencyresponsibleforcybersecurityissueswithintheorganisation?

Liketheindividualcountryprofiles,theprofileforeachIntergovernmentalOrganisationdetailstheStructuresinplace,includingrelevantSpecialisedAgenciesandKeyPositions.TheSpe-cialisedAgenciesincludetheofficialnodalagencieswithintheorganisation,eitherestab-lishedorproposed,taskedwithsupportingcyberpolicy-relatedprocesses.ExamplesincludeRegionalComputerEmergencyResponseTeams(CERTs),CybercrimeAgencies,Commit-tees,andanyJointUnitsestablishedwithintheorganisation.KeyPositionsincludepositionspertinenttotheorganisation’scyberpolicy(oraspectsthereof)anditsimplementation.

11

DoesthePortalofferinformationontheregulationsanddirectivesadoptedbyIntergovernmentalOrganisationsaspartoftheircyberpolicyefforts?

ThePortalfeaturesRegulationsandDirec-tivesadoptedbytheselectedintergovern-mentalorganisation,allofwhichareacces-sibleundertheLegislationcategory.ThiscategoryalsoincludesanyviewsadoptedbytheIntergovernmentalOrganisationsontheapplicabilityofinternationallawincyberspace.

DoesthePortalcontaininformationonthecooperativeinitiativesundertakenbytheIntergovernmentalOrganisation?

ThePortalalsofeaturesinformationontheco-operationinitiativesofIntergovernmentalOr-ganisations,includingrelevantmeetingssuchasconferencesanddialoguesconcerningcyberpolicymatters.Additionally,thissectioncoversexternalcollaborationsinwhichtheorganisationisinvolved,alongwithactivitieslikejointexercises,trainingprograms,andotherinitiativesrelatedtocyberpolicythattheorganisationundertakes.

WherecanIlearnmoreaboutMultistakeholderInstrumentsandOtherInitiativesinthecybersphere?

ThePortalalsoincludessectionfocusingon

MultistakeholderInstrumentsandOtherInitiatives.Thissectionincludescurrentmul-tistakeholderinitiativesincyberspace,suchastheCharterofTrustfromSiemens,ortheParisCallforTrustandSecurityinCyber-space,andotherinitiatives.

12

DoestheUNIDIRCyberPolicyPortalincludefeaturesforeasyaccesstoinformation?

TheUNIDIRCyberPolicyPortalisequippedwithseveralfeaturesdesignedtofacilitateeasyaccesstoinformation.TheseincludeaSearchFunctionthathelpsusersquicklyfindspecifictopicsordata.ThePortalalsofeaturesaFilterFeature,thatallowuserstonarrowdowntheinformationbyvariouscriteria,makingitsimplertolocaterelevantdata.Additionally,thereisaCompareFeaturethatenablesuserstodirectlycomparecyberpolicylandscapeofdifferentcountriesororganisations,providingacomprehensiveoverviewofglobalcyberpolicylandscape.

IstheinformationonthePortalavailableinanyotherUNofficiallanguages?

ThePortalacknowledgestheimportanceofmakinginformationgloballyac-cessibleincyberspace.ItisavailableinallUNofficiallanguages–Arabic,Chinese,English,French,Russian,andSpanish.BoththePortal’sinterfaceandtheindividualsummarieson

theprofileshavebeentranslated.TheinterfacetranslationswereprovidedbytheUNTrans-

lationUnit,whilethesummariescanbetranslatedbyusersutilisingthebuilt-intranslationfeature.Thisensurescomprehensiveaccessibilityforadiverseglobalaudience.

ThePortal’sdetailedinformationon

thecyberpolicylandscapeofallUN

MemberStatesenablesLatinAmeri-

cancountriestostayinformedaboutglobalcybertrends,strategies,and

policies.Thisfostersinternational

cooperation,helpsalignnational

cyberpolicieswithglobalstandards,andultimatelyenhancesbothregionalandglobalcybersecurityresilience.

AmbassadorMaritzaChan,Permanent

RepresentativeofCostaRicatotheUNinNewYork,ChairoftheFirstCommittee,UNGA79

13

HowcanIquicklyaccessanoverviewofallstrategiesorcountriesthathavereleasedtheirpositionontheapplicabilityofInternationalLawincyberspace?

Toeasilyfindanoverviewofallstrategiesorcountriesthathavereleasedtheirpositionsontheapplicabilityofinternationallawincyberspace,thePortaloffersaFilterFeature.LocatedundertheBrowseoptiononthelandingpage,thistoolallowsfortailoredsearches,enablingquickandstraightforwardaccesstospecificdata.Youcanutilisethisfeaturetofilterbyoneormoreofthesixteenavailablecategories,suchasstrategydocuments,viewsoninternationallaw,orlegisla-tion.Additionally,thefilterfunctionincludeslogicaloperatorslike“And”and“Or,”enhancingtheprecisionofthesearch.ThisstreamlinedapproachhelpsusersnavigatethevastinformationonthePortalefficiently,ensuringthattheycanquicklyfindtherelevantinformation.

HowcanIfindspecificdocumentsorinformationonthePortal?

ThePortalfeaturesaContentSearchfunctionthatenablesuserstolocatespecificdocumentsandinformationbysearchingthroughsummariesandtitlesinstateandorganisationprofilesusingkeywords.Simplyenterwordsorphrasesrelevanttoyourareaofinterest,andyoucanchoosetonarrowyoursearchtoeitherstateprofilesororgan-

isationprofiles.Thistargetedapproachhelpsyouquicklyandefficientlyfindtheinformation

youneed.

14

IsthereaneasywaytocompareinformationbetweendifferentStatesandIntergovernmentalOrganisationsprofiles?

ThePortaloffersaCompareFeaturethatsimplifiestheprocessofconductingcom-parativeanalysesofcyberpolicylandscapes.Userscananalyseuptothreestatesororganisationsatthesametime.Tousethis

feature,clickonCompareonthelandingpage,selectthestatesororganisationsyouareinterestedin,andchoosethespecificcategoryyouwanttocompare.Thisfeaturemakesitstraightforwardtodirectlycontrastcyberpoliciesacrossdifferententities.

Wouldyouliketoaccesstheprofileinformationoffline?

TheUNIDIRCyberPolicyPortalprovidesaPrintasPDFoptionthatenablesuserstosaveprofileinformationinPDFformat.Thisfunctionalityisidealforofflineaccess,sharing,andarchiving.Tousethisfeature,simplynavigatetothestatesororganisationsprofileyouwishtosave.Withintheprofile,youwillfindthePrintasPDFoption,whichallowsyoutogenerateaPDFofthedisplayedcontent.ThePDFpreservestheoriginalformatandlayoutofthecontent,ensuringitiseasytoreferencewhenneeded.

Iwouldliketoshareprofileinformation.Whatisthebestwaytodothis?

ToshareaprofilefromthePortal,simplyclicktheSharebuttonfoundontherelevantprofilepage.Thisfeatureallowsyoutosharetheprofiledirectlyonyoursocialmediaaccounts,viaemail,orbycopyingtheinformationtoyourclipboard.Thisoptionmakesdissem-inatingtheinformationstraightforwardandefficient.

15

HowcanIaccessacomprehensiveoverviewofthetypeofinformationavailableonthePortal?

TolocateacomprehensiveoverviewoftheinformationavailableonthePortal,refertotheGlossary.Thisresourceprovidesadetailedlistoftermsanddefinitions,offeringclearexplanationsofkeyconceptsfeaturedacrossvarioussectionsofthePortal.Itspe-cificallydetailsthecategoriesandsubcate-goriespresent,outliningthetypesofinfor-mationyoucanexpecttofindundereach.

DoesthePortalprovidemoreinformationaboutothercybersecuritytools?

Tohelpusersdevelopacomprehensiveun-derstandingofcybersecurityladscape,thePortalprovidesanoverviewofarangeofvaluableresources.TheseincludetheCybilPortalfromtheGFCE,theBrazilianCyber-securityPortalfromIgarapé,theSharingElectronicResourcesandLawsonCrime(SHERLOC)fromtheUNODC,amongothertools.OnthePortal,weprovideabriefsummaryofeachtool’sfunctions.

DoesthePortalprovideaccesstotheNationalSurveyofImplementationofthe2015GGEReportRecommendations?

ThePortaloffersaccesstotheNationalSurveyofIm-plementationofUnitedNationsrecommendationsontheresponsibleuseofICTsbystatesinthecontext

security.collates

ofinternationalTheSurvey

nationaltake-upoftherec-

ommendationsfromthe2015GGEreport,asendorsedbythe2021OEWGandGGEreports