IGF 2020 WS #234 Security of digital products: Industry and enhancing trust

Loading Events

About this Session:
Building on the Geneva Dialogue on Responsible Behavior in Cyberspace (https://genevadialogue.ch) – a project implemented by the Swiss Federal Department of Foreign Affairs and DiploFoundation – this workshop will discuss best practices and examples of creating (more) secure digital products and services. The interactive workshop will bring together perspectives of the lead industry, public authorities, technical community, and civil society, from all parts of the world.

Organizer 1: Jonas Grätz-Hoffmann, FDFA Switzerland
Organizer 2: Anastasiya Kazakova, Kaspersky
Organizer 3: Vladimir Radunovic, DiploFoundation
Organizer 4: Marilia Maciel, DiploFoundation
Organizer 5: Virginia (Ginger) Paque, DiploFoundation

Speaker 1: Jon Albert Fanzun, Government, Western European and Others Group (WEOG)
Speaker 2: David Koh, Chief Executive of the Cyber Security Agency of Singapore and Singapore’s Commissioner of Cyber Security for Singapore
Speaker 3: Barrack Otieno, Technical Community, African Group
Speaker 4: Anastasiya Kazakova, Private Sector, Eastern European Group
Speaker 5: Sebastian Stranieri, Private Sector, Latin American and Caribbean Group (GRULAC)

Format: 
Round Table – Circle – 90 Min
Online duration reset to 60 minutes.

New Online Format: 
Round Table

Description:
Vulnerabilities of digital products are rapidly being exploited by a wide range of actors for various purposes. Nations develop military cyber arsenals for defensive and offensive use. Criminals organise transnationally, putting businesses and consumers at risk. Terrorists and political groups improve skills to conduct digital attacks. Consequences of cyber-attacks are often global, and increasingly destructive. This puts the stability of the digitalised world at risk, erodes user trust in digital services, and undermines global online business models. To reduce these risks, businesses must increase the resilience of their digital products and services. Enhanced security practices not only protect individual businesses; but also act as a general deterrent by raising the cost and difficulty of cyber-attacks, increasing consumer trust, and strengthening supply chains. However, securing the digital space is a collective effort. Among other things, it requires the global business community to work together – in co-operation with authorities and civil society communities – to enhance the security of their digital products; set examples and leadership towards others; and drive up demand among users for more secure products. Building on the Geneva Dialogue on Responsible Behaviour in Cyberspace (https://genevadialogue.ch/) – a project implemented by the Swiss Federal Department of Foreign Affairs and DiploFoundation – this workshop will discuss best practices and examples of creating global, resilient, and ethical digital products. The interactive workshop will bring together perspectives of the industry, public authorities, technical community, and civil society, from all parts of the world.

Issues: 
What are the main guiding principles for ensuring security of digital products and services? What is industry doing about it – what are good (and bad) practices around the world, from various industries? How do users, civil society look at insecure products, and what is needed to drive the demand for more secure products? What are the policy challenges in enhancing security of products, and what can public authorities and regulators do to help the industry? How to bring emerging businesses on board to implement high security in the product inception phase already?

Policy Question(s): 
Tentative policy questions: – How is trust in cyberspace influenced by the security of digital products; across various sectors and geographies? – What are the guiding principles for resilience and security of products? What can we take from existing multilateral and multistakeholder initiatives, and what should be added? – What are the expectations of other stakeholders towards the industry with regard to enhanced product security? – What particular roles and responsibilities is the industry willing to take at a global level? – What are the best (and bad) practices of the industry? – What are the technological, economic, and political challenges that the industry faces? How can the authorities assist the industry in bridging these challenges? – What are the next steps for the industry and other stakeholders?

Expected Outcomes: 
Discussion will feed into the output documents of the Geneva Dialogue, in particular on principles and good practices on securing digital products and services. Also, government stakeholders such as the Swiss FDFA will highlight specific outcomes of the discussion in UN fora such as the UN Group of Governmental Experts (UN GGE) on advancing responsible state behaviour in cyberspace in the context of international security.

Relevance to Internet Governance: Trust and security in digital technologies are central for the further evolution of the Internet. Governments, the private sector, and civil society have already shaped initial sets of norms for responsible behaviour in cyberspace, in particular in relation to trust and security. The most important international multilateral instruments are the two reports of the UN GGE – namely the reports from 2013 and 2015 – both subsequently adopted by the General Assembly. An important initiative, shaped jointly by governments and the private sector, is the Paris Call for Trust and Security in Cyberspace. Several principles of responsible behaviour of the business sector have been developed by the industry itself – in particular the Charter of Trust for a Secure Digital World, and the Cybersecurity Tech Accord. Not the least, the Geneva Dialogue on Responsible Behaviour in Cyberspace has in its first phase; outlined key roles and responsibilities of governments, the industry, civil society, and communities with regards to Internet use and international security. The workshop, which directly contributes to the second phase of the Geneva Dialogue, will discuss particular roles of the industry in relation to securing digital products and services; and raise good practices related to shaping and implementing joint principles, contributing to trust and security on the Internet.

Relevance to Theme: Trust in the digital environment heavily depends on the possibility of misuse and exploitation of digital products and services. In order to increase users’ trust and strengthen the supply chain, global businesses must increase the resilience of their digital products and services. A collective effort of the broad community of businesses worldwide is required. This effort includes close co-operation with authorities and civil society communities; to enhance trust and security of the digital environment. The session will bring together various stakeholders from around the globe, to discuss how (in)security of digital products can impact trust, and look for principles and particular roles of the industry to reduce risks and enhance trust.

Moderator:
Marilia Maciel, Civil Society, Latin American and Caribbean Group (GRULAC)

Online Moderator:
Virginia (Ginger) Paque, Civil Society, Western European and Others Group (WEOG)

Rapporteur:
Vladimir Radunovic, Civil Society, Eastern European Group

Discussion Facilitation:
Interactive discussion, in round table seating. Moderator will invite audience to reflect on policy questions, and then turn to discussants to contribute with own positions. Particular voice will be given to youth participants in the audience, who drive the demand for new solutions. High interaction with the online participants will be stimulated; including through the introduction of online polls, and audio/video interventions from remote hubs. In case the IGF is held online entirely (with no in situ component), the workshop’s format will be adjusted to include additional interactive and multimedia elements. Before the session begins, best practices and possible roles of the industry for more secure digital products and services, taken from the ongoing Geneva Dialogue on Responsible Behaviour in Cyberspace (https://genevadialogue.ch/) will be provided as direct input into discussions.

Online Participation:

Usage of IGF Official Tool.

Additional Tools proposed: Mentimeter (online engagement tool), possibly slides/multimedia (not presentations, however) for visual reflections

SDGs:
GOAL 8: Decent Work and Economic Growth
GOAL 9: Industry, Innovation and Infrastructure
GOAL 10: Reduced Inequalities
GOAL 11: Sustainable Cities and Communities
GOAL 16: Peace, Justice and Strong Institutions
GOAL 17: Partnerships for the Goals

Agenda:
TBC

Register here