Cyber Security “Priority on United Nations Agenda”

The fourth session of the “Open-Ended Working Group (OEWG) on security of and in the use of information and communications technologies” held its proceedings on March 6-10, 2023, focusing on global cyber security threats,  Trust Building Measures (TBM) and capacity building, as well as norms of responsible behavior of states in cyberspace.

Albania, represented by the Permanent Mission to the UN and representatives of NAECCS, emphasized with the first statement the treatment of possible threats in cyber space. In a second statement, emphasis was placed on the measures that states can undertake to strengthen trust between them, in function of peace and security between countries, as well as in more detail on the priority issue for Albania, that of strengthening and building of capacities, in line with international and interregional commitments, as well as with the policies of the European Union and the TBM of the OSCE.

In its statement, Albania, within the framework of confidence-building measures, emphasized the importance of information exchange through regional and global platforms, not only as a tool for protection against cyber threats, but also as a tool for building trust towards states. In this context, Albania declared its commitments in line with the OSCE TBM.

Regarding capacity building, Albania emphasized that it is fully in line with the EU declaration and presented the progress in terms of: harmonization of the legal framework with the framework of the European Union; establishment of the National CSIRT; trainings for increasing the capacities of sectoral CSIRTs; consolidating capacities for cyber diplomacy and cyber governance; trainings and awareness campaigns in the field of cyber security for public administration, industry, children and young people; as well as addressing cyber security topics in educational curricula.

At the same time, Albania appreciated in its statement the cooperation with international organizations such as ITU, OSCE, EU, RCC, etc, facilitating and contributing in the increase of capacities.

Finally, the delegation thanked the US Department of State, the Netherlands and the Global Forum on Cyber Expertise for their contribution to the promotion of women in the field of cyber security, through the Women in International Security and Cyberspace program.

The fifth session of the OEWG will take place on July 24-28, 2023, during which it is expected to address, among other things, the establishment of the Intergovernmental Points of Contact Directory, in line with the Annual Progress Report A/77/275, in which “States agree to create, based on the work done at the regional level, a directory of global, intergovernmental contact points”.

Intergovernmental Points of Contact Directory will serve as a Confidence Building Measure (CBM) and provide the framework for the implementation of other CBMs that enable an open, secure, sustainable, accessible and peaceful environment for technologies of information and communication.

Both statements of Albania during the fourth session

07.03.2023 Statement by

Mrs. Naureda Breshanaj, Counsellor

Permanent Mission of the Republic of Albania to the UN

Fourth Substantive Session of the Open-Ended Working Group on Security of and in the Use of

Information and Communications Technologies 2021-2025 6 to 10 March 2023

Agenda: Existing and Potential Threats

Thank you Mr. Chair,

Dear colleagues,

At the outset, allow me to extend our appreciation and support to you, Ambassador Gafoor as Chair of this group and to your team for your efforts in facilitating a focused discussion, guided by the First Annual Progress Report, addressing issues that concern today each of us at national, regional and international level.

Albania aligns with the statements delivered by EU Delegation on multi-stakeholder participation, as well as on the issue of threats in cyberspace, for which I would like to make the following statement on our national capacity.

Mr. Chair,

Technological advances are dramatically impacting international peace and security. The potential for misuse by states or non-state actors is significantly growing.

Some countries are continuously trying to deliberately mislead information, distort facts, interfere in democratic processes of others, spread hatred, discrimination, incite violence or conflicts by misusing digital technologies. In the same vein, we see with concern unlawful internet shutdowns, restrictions, or denial of human rights and freedoms in using them.

Allow me to recall that our region is systematically targeted by campaigns of interference and manipulation of information, which aim to create political instability and hinder the peace, development and stability. Cyber-attacks have tried to suspend the online work of public institutions in these countries.

We are deeply concerned by the malicious information and communications technology activities aimed at critical infrastructure and critical information infrastructure facilities, affecting essential services to the public.

As rightfully recalled by previous speakers, Albania’s critical infrastructure went under two massive cyber-attacks last year, of complex nature, in an unsuccessful attempt by one state to inflict damage to the critical infrastructure, erase digital systems, steal data, trying to paralyze on-line public services, that constitute 95 % of all public service, trying to paralyze the whole country, to create chaos and insecurity. It was a blatant breach of norms of a responsible State behavior in cyberspace, in violation of the principles of the UN Charter and the international laws.

Albania recognizes cyber security as a top priority. We will bring this issue to the attention of the Security Council during this year. In this regard, we are taking the appropriate actions to protect ourselves from potential cyber threats based on cooperation with the strategic national and international partners, by implementing security measures in critical information infrastructure and, more concretely, by building the National Security Operations Center (SOC) to effectively respond against cyber threats.

Cyberattacks and cyber-threats are unlawful acts, must be condemned and must be treated accordingly. Impunity for these illegal activities by state or non-state actors should be properly addressed in our discussion.

In this sense, Albania believes in the imperative to defining rules that ensure security and stability in cyberspace within the framework of the United Nations, grounded in the UN Charter and existing international laws, international humanitarian law, and international human rights law.

 

In July 2022, member states recalled that the PoA should be further elaborated including at the 2021-2025 Open-Ended Working Group process. We look forward and encourage member states to further elaborate during this session the proposal put forward by France and Egypt for the Programme of Action to Advance Responsible State Behavior in Cyberspace. This permanent mechanism could be very instrumental in bringing resilience and stability in cyberspace.

Finally, Mr. Chair, allow me to reiterate Albania’s firm position for a global, open, free, stable and secure cyberspace where international law, including respect for human rights and fundamental freedoms fully apply, supporting social, political and economic development.

We believe that multilateral efforts, the United Nations play an important role in continuing the dialogue between member states.

Thank you.

09.03.2023

 

Statement by

Mrs. Naureda Breshanaj, Counsellor

Permanent Mission of the Republic of Albania to the UN

Fourth Substantive Session of the Open-Ended Working Group on Security of and in the Use of

Information and Communications Technologies 2021-2025 6 to 10 March 2023 Agenda: Capacity building

 

Thank you Mr. Chair,

Dear colleagues,

As we did not take the floor on confidence building measures, allow me to add the importance of information sharing at regional and global platforms, that is a tool not only for protection or prevention from ongoing or future cyber-attacks, but also as a tool for building trust between states. In case of my country, Albania is sharing information on cyber threats with other Cyber Incident Response Teams, to facilitate implementation of best practices in this field, based on OSCE Confidence Building Measures, aiming promotion of international cooperation for a safer global cyber ecosystem.

On the issue of capacity building, Albania aligns with the statement delivered by EU Delegation and would like to highlight the following.

Mr. Chair,

Albania learned the hard way that cybersecurity capacity building is fundamental when it comes to maintenance of a secure and peaceful cyberspace and also for the prevention from cyber threats and cyber-attacks.

We recognize the critical importance of capacity-building in cyber security. Speaking from the perspective of a small state, with limited capacities, we want to highlight the importance of assistance, be it financial, logistical, educational, information sharing from other states, regional and international organizations, as well as from private sector and multinational corporations, in setting the foundations for the right necessary capacities, directly contributing to a stable, peaceful and secure environment in cyberspace.

Albania has undertaken significant steps in terms of strengthening its cybersecurity, by adopting its National Strategy on Cybersecurity and its Action Plan 2020-2025, outlining specific policy goals and strategic objectives to ensure cybersecurity at national level, harmonize its cybersecurity legal framework with European Union legislation.

Albania is actively working to develop its own cybersecurity capacities, enhance its cyber resilience, focused on the following measures:

  • establishing effective national and other sectoral Computer Security Incident Response Team in linewith the sectors defined with EU norms (energy, financial, health, transport, digital, government and water supplies sector);
  • educational and professional capacity building policies on Information and Communication Technology (ICT) through revision of curricula, trainings, scenarios, cyber exercises dedicated to the CIRT’s responsible staffs, to respond to potential cyber-threats;
  • increasing capacities, through cyber courses on International Cyber Law for relevant responsibleexperts on cyber security issues, as for example Tallinn Manual on cyber warfare, to increase capacities and responsibilities at the national level against cyber threats;
  • consolidating capacities in cyber-diplomacy and cyber-governance;
  • trainings on cyber hygiene, personal data protection and awareness raising campaigns for publicinstitutions and industry, which access digital essential services related to critical information infrastructures;
  • integration of dedicated topics on online safety and education of children in the use of informationtechnology in their curricula.

Mr. Chair,

Regional and international cooperation, partnership and networking are excellent opportunities to build synergies and coordination in building capacities in cybersecurity. Here in the OEWG we could make best use building from best practices and research already made by these regional and international organizations, in our case, its ITU, OSCE, EU, RCC, etc, that already have delivered with objectives and recommendation on how to improve capacities and build cyber resilience for our region.

A multi-stakeholder involvement in capacity building is vital for a more whole-of-a-society approach, including contribution from private sector, business, industry, academia, civil society.

In an appreciation note, I would like to thank US, Netherlands and the Global Forum on Cyber Expertise (GFCE) for their contribution in promoting female cyber experts in our team, through Women in International Security and Cyberspace fellowship.

Diversity and gender balance should be further strengthened in terms of capacity-building in cybersecurity. It is encouraging to see a positive trend of women cyber experts, including in this very hall. We welcome all efforts, by all stakeholders, for a meaningful and effective inclusion of women in all cyber-related agendas, with equal rights as men.

Thank you.

 

Meeting with US Army Major General William Hartman
AKSK