Creation of a Global Culture of Cybersecurity and the Protection of Critical Information Infrastructures

A/RES/58/199View PDF

Who adopted this document and its mandates?

A Resolution of the General Assembly, under agenda item 91b Science and technology for development, published in 2004.

Which reports were submitted under this mandate?

1 report · 2005

Year	Symbol	Title		Mandate resolution
2005	A/60/443	Optimizing the international effort to study, mitigate and minimize the consequences of the Chernobyl disaster report of the Secretary-General		A/RES/58/199

What’s in this document?

6 operative paragraphs

Takes note of the elements set out in the annex to the present resolution for protecting critical information infrastructures;

Invites all relevant international organizations, including relevant United Nations bodies, to consider, as appropriate, inter alia, these elements for protecting critical information infrastructures in any future work on cybersecurity or critical infrastructure protection;

Invites Member States to consider, inter alia, these elements in developing their strategies for reducing risks to critical information infrastructures, in accordance with national laws and regulations;

Invites Member States and all relevant international organizations to take, inter alia, these elements and the need for critical information infrastructure protection into account in their preparations for the second phase of the World Summit on the Information Society, to be held in Tunis from 16 to 18 November 2005;

Encourages Member States and relevant regional and international organizations that have developed strategies to deal with cybersecurity and the protection of critical information infrastructures to share their best practices and measures that could assist other Member States in their efforts to facilitate the achievement of cybersecurity;

Stresses the necessity for enhanced efforts to close the digital divide, to achieve universal access to information and communication technologies and to protect critical information infrastructures by facilitating the transfer of information technology and capacity-building, in particular to developing countries, especially the least developed countries, so that all States may benefit fully from information and communication technologies for their socio-economic development.

Elements for protecting critical information infrastructures

Have emergency warning networks regarding cyber-vulnerabilities, threats and incidents.

Raise awareness to facilitate stakeholders’ understanding of the nature and extent of their critical information infrastructures and the role each must play in protecting them.

Examine infrastructures and identify interdependencies among them, thereby enhancing the protection of such infrastructures.

Promote partnerships among stakeholders, both public and private, to share and analyse critical infrastructure information in order to prevent, investigate and respond to damage to or attacks on such infrastructures.

Create and maintain crisis communication networks and test them to ensure that they will remain secure and stable in emergency situations.

Ensure that data availability policies take into account the need to protect critical information infrastructures.

Facilitate the tracing of attacks on critical information infrastructures and, where appropriate, the disclosure of tracing information to other States.

Conduct training and exercises to enhance response capabilities and to test continuity and contingency plans in the event of an information infrastructure attack, and encourage stakeholders to engage in similar activities.

Have adequate substantive and procedural laws and trained personnel to enable States to investigate and prosecute attacks on critical information infrastructures and to coordinate such investigations with other States, as appropriate.

Engage in international cooperation, when appropriate, to secure critical information infrastructures, including by developing and coordinating emergency warning systems, sharing and analysing information regarding vulnerabilities, threats and incidents and coordinating investigations of attacks on such infrastructures in accordance with domestic laws.

Promote national and international research and development and encourage the application of security technologies that meet international standards.

Creation of a Global Culture of Cybersecurity and the Protection of Critical Information Infrastructures

Who adopted this document and its mandates?

Which reports were submitted under this mandate?

What subjects does this mandate have?

What’s in this document?

Table of contents