Check-in and access this session from the IGF Schedule.

IGF 2024 WS #190 Securing critical infrastructure in cyber: Who and how?

    Organizer 1: Vladimir Radunovic, 🔒DiploFoundation
    Organizer 2: Droz Serge, Swiss Federal Department of Forgein Affairs
    Organizer 3: Anastasiya Kazakova, DiploFoundation
    Organizer 4: Bojana Kovac, DiploFoundation

    Speaker 1: Kazuo Noguchi, Private Sector, Western European and Others Group (WEOG)
    Speaker 2: Bushra AlBlooshi, Government, Asia-Pacific Group
    Speaker 3: Nicolas Grunder, Private Sector, Western European and Others Group (WEOG)
    Speaker 4: Kaleem USMANI, Government, African Group

    Moderator

    Vladimir Radunovic, Civil Society, Eastern European Group

    Online Moderator

    Anastasiya Kazakova, Civil Society, Eastern European Group

    Rapporteur

    Bojana Kovac, Civil Society, Eastern European Group

    Format

    Roundtable
    Duration (minutes): 90
    Format description: The roundtable format and 90-minute duration are tailored to maximise engagement and effectiveness for our session. The circular seating arrangement promotes inclusivity and active participation, ensuring every voice is heard and fostering dynamic discussions. With 90 minutes allocated, we strike a balance between depth of exploration and time efficiency, allowing for exploration of topics without losing momentum. This duration respects participants' time constraints while providing an opportunity for meaningful exchange of ideas and insights. Additionally, the roundtable setting encourages networking and relationship-building, enhancing the overall value of the session.

    Policy Question(s)

    A. How can international cooperation be strengthened to develop minimum cybersecurity measures for critical infrastructure protection (CIP), recognising the interdependencies of ICT infrastructure and the potential systemic risks posed by cyberthreats? B. In what manner can emerging technologies, such as Artificial Intelligence (AI), be seamlessly integrated into the existing frameworks for safeguarding critical infrastructure, and how can these frameworks remain adaptive to evolving cyberthreats and vulnerabilities? C. Which strategies can be identified to enhance information sharing and transparency among stakeholders, both domestically and internationally, concerning the classification of critical infrastructure, cyber risk assessment methodologies, and coordinated incident response mechanisms?

    What will participants gain from attending this session? Through a roundtable and scenario-based discussion, various participants – representing diverse geographical and stakeholder communities – will have the opportunity to share their perspectives concerning the roles and responsibilities of non-state stakeholders to protect critical infrastructure and implement the relevant existing cyber norms and confidence-building measures (CBMs). The session will bring various leaders from different stakeholder groups to discuss these issues and to, in a highly interactive form during a simulation exercise, exchange views as well as learn from one another. Attendees will thus be invited to actively contribute to the next chapter of the Geneva Manual, which examines the implementation of these norms, and outlines incentives for stakeholders, challenges in implementation, and relevant best practices, drawing from both successful and unsuccessful experiences.

    Description:

    In the times when increasing interdependencies span across national borders and, along with hybrid conflicts, in which the line between cyber and physical becomes blurrier and, probably, less relevant, are states and relevant stakeholders sufficiently equipped to protect the most critical assets? How do the relationships between public and various private actors, both during conflict and peace times, transform in protecting critical infrastructure? How do the existing and emerging tech impact critical infrastructure protection (CIP)? Is there a need for an international approach to, and minimum cybersecurity measures for CIP, and what would those include? What role do the agreed UN framework and cyber norms play in CIP? Are the roles and responsibilities clear for non-state stakeholders, and how can they support states in promoting responsible behaviour in cyberspace? The Geneva Dialogue on Responsible Behaviour in Cyberspace (GD) addresses these concerns in a multistakeholder approach, engaging representatives from the private sector, academia, civil society, and technical community for a regular dialogue. Established by Switzerland in 2018 and implemented by DiploFoundation with support of others, the GD maps the roles and responsibilities of various actors in the implementation of agreed cyber norms and thus contributes to stability and security in cyberspace. The outcomes of those dialogues are published in the Geneva Manual, offering a comprehensive guidance on non-state actors’ implementation of the normative framework agreed by states, in the context of the UN GGE/OEWG. The session will bring together actors, including those from the Global South, to discuss the issues identified above, provided also in a format of a scenario-based discussion, i.e. simulation exercise with the cards developed by the GD. The insights gathered during the session will contribute to the forthcoming chapter of the Geneva Manual, focusing on the implementation of CIP related norms and confidence-building measures (CBMs).

    Expected Outcomes

    The session will foster a deeper understanding of the roles and responsibilities of non-state stakeholders in safeguarding critical infrastructure and implementing the relevant agreed cyber norms and confidence-building measures (CBMs). By engaging in scenario-based discussions and sharing insights, participants will collaboratively discuss a possible implementation checklist of the existing norms and CBMs outlining key actions for relevant stakeholders. Additionally, the session will highlight relevant good practices drawn from diverse experiences, offering valuable lessons to protect critical infrastructure. Ultimately, the expected outcome is to equip participants with practical knowledge and tools to support their meaningful participation in such processes, as well as encourage their contributions in enhancing cybersecurity and resilience in CIP.

    Hybrid Format: The session will be structured into two engaging parts: a roundtable multistakeholder discussion led by organisers, and scenario-based discussions in smaller groups (i.e. simulation exercise). The session will start with a presentation of findings from the Geneva Manual zero draft, highlighting potential roles and responsibilities of non-state stakeholders in implementing cyber norms and CBMs related to CIP. During the roundtable, participants will discuss policy questions, with designated discussants offering their perspectives to start the conversation. Special attention will be given to the participants representing youth and attendants from open-source communities, civil society, SMEs, academia, and the Global South, recognising their vital role in implementing norms despite resource constraints. Interaction with online participants will be encouraged through polls and chat discussions, facilitated by moderators. With Diplo's expertise in organising hybrid meetings, seamless engagement will be ensured for both in-person and remote attendees.