Internet governance, also referred to as digital policy, deals with the policy issues associated with digital technology.
Diplo has been providing capacity development support for many years. This includes online and blended courses, policy research, policy immersion, and community support. Since many small and developing countries have limited resources and institutional capacity in this sector, Diplo provides special assistance to practitioners from these countries.
What is internet governance?
Internet governance refers to the shared principles, norms, rules, decision-making procedures, and programmes that shape the evolution and use of the Internet. Governments, the private sector, and civil society each contribute to developing these principles, rules, and processes, in their respective roles. (WGIG, 2015)
Although internet governance deals with the core of the digital world, the digital-binary logic of true and false, or good and bad, is inadequate when talking about technology. Instead, there are many subtleties and shades of meaning and perception. In order to shape and engage in internet governance, practitioners require an analogue approach. Such approach needs to cover a continuum of options and compromises.
The book An Introduction to Internet Governance (7th ed.), by Dr Jovan Kurbalija, needs no introduction. In fact, today it is one of the most widely-used books by digital policy professionals and across universities. It has also been translated into 10 languages.
The book provides a comprehensive overview of the main issues and actors in the field through a practical framework for analysis, discussion, and resolution of significant issues. Download the latest edition, or any of the translated versions.
Address: 1440 G St NW (9th floor) Washington, DC 20005
Website:
https://www.gbbcouncil.or
Stakeholder group: NGOs and associations
The Global Blockchain Business Council (GBBC) was created in 2017 with the aim to advance global understanding and adoption of blockchain technology. It does so by engaging and educating business leaders, regulators, and gloal decision makers on how to harness blockchain to create more secure, equitable, and functional societies.
The Council brings together over 30 companies that are committed to the belief that blockchain technology can change the way in which business is done. Through it activities, the GBBC intends to help maximise the benefits of blockchain for industry and society, and assist businesses, governments, and organisations understand that blockchain will enable them to ensure data integrity and create records, transactions, and systems that are secure, transparent, and more resilient againt manipulation and corruption.
Address: Campus Biotech Innovation Park, 15 avenue de Sécheron, 1202 Geneva, Switzerland
Website:
https://cyberpeaceinstitute.org/
Stakeholder group: NGOs and associations
The CyberPeace Institute is an independent and neutral non-governmental organisation (NGO) that strives to reduce the frequency, impact, and scale of cyberattacks, to hold actors accountable for the harm they cause, and to assist vulnerable communities.
The institute is a Geneva-based NGO, also working in close collaboration with relevant partners to reduce the harm from cyberattacks on people’s lives worldwide and provide assistance. By analysing cyberattacks, we expose their societal impact and how international laws and norms are being violated, and advance responsible behaviour to enforce cyberpeace.
At the heart of the Institute’s efforts is the recognition that cyberspace is about people. We support providers of essential services to the most vulnerable members of society, ultimately benefitting us all, like NGOs and the healthcare sector. Attacking them can have a devastating impact on beneficiaries and patients, putting their rights and even lives at risk.
To deliver on this mission, we rely on donations and the generosity of individuals, foundations, companies, and other supporters. This support enables us to assist and support vulnerable communities, including NGOs, to enhance their resilience to cyberattacks.
The Institute also provides evidence-based knowledge and fosters awareness of the impact of cyberattacks on people, to give a voice to and empower victims to highlight the harm and impact of cyberattacks. We remind state and non-state actors of the international laws and norms governing responsible behaviour in cyberspace, and advance the rule of law to reduce harm and ensure the respect of the rights of people.
Digital activities
Created in 2019, the Institute assesses the impact of cyberattacks from a human perspective, focusing on the rights of people. We ground our analysis on evidence and the impact on human well-being, telling the story of people, linking it with the technical reality of cyberattacks, and assessing it against the violation of laws. The Institute advocates for an evidence-based, human-centric approach to the analysis of cyberattacks as essential to the process of redress, repair, and/or justice for victims. It works collaboratively in our research, analysis, assistance, mobilisation, and advocacy. We engage with vulnerable communities to understand their needs for cybersecurity support and provide free and trusted cybersecurity assistance to vulnerable communities.
The CyberPeace Institute
assists NGOs and other vulnerable communities to prepare for and recover from cyberattacks.
investigates cyberattacks targeting vulnerable communities, analysing these attacks to provide alerts and support and for accountability.
advocates to advance the rule of law and respect for the rights of people.
anticipates threats to people associated with emerging and disruptive technologies.
Examples of operational activities
Assisting humanitarian and other NGOs with free and trusted cybersecurity support.
Analysing cyberattacks and highlighting their impact on people and how they violate the rule of law.
Documenting violations of international laws and norms and advocating for strengthened legal protection in cyberspace.
Offering expertise and support to states and civil society in relation to responsible behaviour in cyberspace.
Foreseeing and navigating future trends and threats in cyberspace.
Digital policy issues
Critical infrastructure
Cyberattacks against critical infrastructure have been on the rise, from attacks against hospitals and vaccine supply chains to attacks on the energy sector. When such disruptions occur, access to basic services is at risk. It is vital that there is an increase in the capacity and ability to improve resilience to cyberthreats in critical sectors, such as healthcare. The CyberPeace Institute urges stakeholders in diplomatic, policy, operational, and technical areas to increase their capacity and resilience to cyberthreats.
The Institute advocates for capacity building aimed at enabling states to identify and protect national critical infrastructure and to cooperatively safeguard its operation. This includes capacity building, implementation of norms of responsible behaviour, and confidence building measures. In strengthening efforts to protect critical infrastructure, the Institute calls for the sharing of lessons learned between countries to assist those with less capacity and fewer capabilities.
NGOs in civilian-critical sectors, for example water, food, healthcare, energy, finance, and information, need support and expertise to help them strengthen their cybersecurity capabilities. While these NGOs provide critical services to communities and bridge areas not covered by public and private actors, they lack the resources to protect themselves from cybersecurity threats.
Examples of the Institute’s work in this regard:
Calls to governments to take immediate and decisive action to stop all cyberattacks on hospitals and healthcare and medical research facilities, as well as on medical personnel and international public health organisations.
Capacity building is essential for achieving cyber preparedness and resilience across sectors and fields, and activities focus on providing assistance and capacity building to NGOs that might lack technical expertise and resources.
An interactive platform named The CyberPeace Watch to expand the monitoring to other contexts including other situations of armed conflict and to the application of relevant laws and norms. This informs policy and legal processes and developments, the preparedness and protection of critical infrastructure, and cyber capacity building.
Participation in the INFINITY project to transform the traditional idea of criminal investigation and analysis. INFINITY has received funding from the European Union’s Horizon 2020. Its concept is based around four core research and technical innovations that together, will provide a revolutionary approach and convert data into actionable intelligence.
Participation in the UnderServed project, an EU- funded initiative to address the lack of adequate cybersecurity measures for vulnerable sectors, including humanitarian, development, and peace non-governmental organisations (NGO). The primary objective of the project is to establish a comprehensive platform for reporting and analysing cyber threats. This platform is tailor-made for NGOs vulnerable to cyberattacks, which often lack the resources to effectively mitigate such threats.
Network security
NGOs play a critical role in ensuring the delivery of critical services, such as the provision of healthcare, access to food, micro-loans, information, and the protection of human rights.
Malicious actors are already targeting NGOs in an effort to get ransoms and exfiltrate data. Often these NGOs do not have the budget, know-how, or time to effectively secure their infrastructures and develop a robust incident response to manage and overcome sophisticated attacks.
With this in mind, the Institute launched its CyberPeaceBuilders programme in 2021, a unique network of corporate volunteers providing free pre- and post-incident assistance to NGOs supporting vulnerable populations.
This initiative brings support to NGOs in critical sectors at a level that is unequalled in terms of staff, tools, and capabilities. It assists NGOs with cybersecurity whether they work locally or globally, and supports them in crisis-affected areas across the globe.
Capacity development
The Institute believes that meaningful change can occur when a diversity of perspectives, sectors, and industries work together. To address the complex challenges related to ensuring cyberpeace, it works with a wide range of actors at the global level including governments, the private sector, civil society, academia, philanthropies, policymaking institutions, and other organisations. The Institute contributes by providing evidence-led knowledge, emphasising the need to integrate a genuine human-centric approach in both technical and policy-related projects and processes, and by highlighting the civil society perspective to support and amplify existing initiatives.
Training
The CyberPeace Institute is providing comprehensive training for NGOs Boards and Staff, Foundations and Volunteers designed to empower organisations with vital tools for safeguarding their missions.
We recently launched a Cyber School, in partnership with Microsoft, to create a unique, free offer to participate in an 8-week virtual course for everyone who is interested in taking their first step into a new career path.
Interdisciplinary approaches
To contribute to closing the accountability gap in cyberspace, the Institute seeks to advance the role of international law and norms.
It reminds state and non-state actors of the international law and norms governing responsible behaviour in cyberspace, and contributes to advancing the rule of law to reduce harm and ensure the respect of the rights of people.
Contribution to UN processes
In 2021–2022, the Institute contributed to and commented on various UN-led processes (notably the United Nations Group of Governmental Experts on Advancing responsible state behaviour in cyberspace in the context of international security (UN GGE) and the Working Group (WG) on the use of mercenaries as a means of violating human rights and impeding the exercise of the rights of peoples to self-determination).
Since its inception, the Institute has closely followed the work of the UN Open-Ended Working Group (UN OEWG) on developments in the field of information and telecommunications in the context of international security, advocating recognition of the healthcare sector as a critical infrastructure and raising concerns about the lack of commitment towards an actionable and genuine human-centric approach.
In the Open-Ended Working Group on security of and in the use of information and communications technologies 2021–2025 (OEWG II), the Institute set out three key action areas and related recommendations, and is contributing its expertise in relation to the protection of humanitarian and development organisations from cyberattacks.
– The Institute issued a Statement at the Ad Hoc Committee to Elaborate a Comprehensive International Convention on Countering the Use of Information and Communications Technologies for Criminal Purposes (Cybercrime Convention
Moreover, the Institute sought to advance the Cyber Programme of Action (PoA) by offering recommendations concerning the range, organisation, and approaches for stakeholder participation.
Also, the Institute welcomed the call for civil society organisations to contribute to the Global Digital Compact and provided a set of recommendations.
Participation in international initiatives: The Paris Call Working Groups
To operationalise these principles, in November 2020 six working groups were created to work on various issues that relate to them. The Institute co-led WG5 with colleagues from Geopolitics in the Datasphere[Géopolitique de la Datasphère] and The Hague Centre for Strategic Studies (HCSS).
The work of this group led to the Final Report published during the Paris Peace Forum 2021. It presents a methodology to facilitate understanding of how the implementation of normative, legal, operational, and technical measures, or the lack thereof, contribute to stability in cyberspace and ultimately to cyberpeace.
The Institute chaired the session “Unpacking the Cyber Mercenaries’ Phenomenon” at the 6th edition of the Paris Peace Forum.
At the World Economic Forum meeting in Davos, in May 2022, the CyberPeace Institute joined AccessNow, the Office of the High Commissioner for Human Rights (OHCHR), Human Rights Watch (HRW), Amnesty International, the International Trade Union Confederation (ITUC), and Consumers International to call on decision-makers to take action and initiate a moratorium limiting the sale, transfer, and use of abusive spyware until people’s rights are safeguarded under international human rights law.
This is in addition to a call made in 2021, in which the Institute joined more than 100 civil society organisations calling for a global moratorium on the sale and transfer of surveillance technology until rigorous human rights safeguards are adopted to regulate such practices and guarantee that governments and non-state actors don’t abuse these capabilities.
EU Processes
At the Institute, we conduct an evaluation of best practices in implementing EU regulations, focusing on their evolution and development to ensure effective execution. Simultaneously, we analyse EU mechanisms like the EU Cyber Diplomacy Toolbox, aimed at countering malicious cyber activities and bolstering resilience, while providing targeted observations and recommendations.
We provided positions and recommendations on the EU AI Act (unpublished yet).
Digital technology plays an important role in conflict mediation and global peacebuilding. It can extend inclusion, allowing more women or people from marginalised groups to take part in or follow a mediation process. It can make mediation faster and more efficient and can allow mediators to draw on resources from around the world.
However, digital technology brings risks, too. It can increase polarisation, for example, and allow disinformation to spread to more people, more quickly. It can increase vulnerability to malicious actors, spying, and data breaches. These risks can undermine trust in the process.
Mediators work in low-trust, volatile contexts and don’t always have the knowledge to assess the risks posed by digital technology. A new online platform helps to raise awareness of those risks, as well as offering training on how to deal with them. The Digital Risk ManagementE-Learning Platform for Mediators was created in 2021 by the CyberPeace Institute, CMI – Martti Ahtisaari PeaceFoundation, and the UN Department of Political and Peacebuilding Affairs (UNDPPA) Mediation Support Unit.
As part of the integration and engagement with the stakeholder ecosystem in Geneva, the Institute is a member of the Geneva Chamber of Commerce, Industry and Services (CCIG). Various academic collaborations are ongoing through participation in conferences, workshops, and lectures, namely with the Ecole Polytechnique Fédérale de Lausanne Centre for digital trust EPFL (C4DT), the University of Geneva (UNIGE), and the Graduate Institute (IHEID). In 2020, the Institute formed a strategic partnership with the SwissTrust Valley for Digital Transformation and Cybersecurity.
The Institute maintains a website providing alerts, blogs, articles, and publications on key issues related to its mission for cyberpeace, and shares video materials and discussion recordings on YouTube channel.
Address: Chemin des Colombettes 34, 1211 Geneva 20, Switzerland
Website:
https://www.wipo.int/
Stakeholder group: International and regional organisations
WIPO is a UN agency functioning as the global forum for intellectual property (IP) related services (patents, copyright, trademarks, and designs), policy, information, and cooperation. The organisation was established in 1967. It currently has 193 member states and over 200 observers representing non-governmental organisations (NGOs) and intergovernmental organisations. WIPO leads the development of a balanced and effective global IP ecosystem to promote innovation and creativity for a better and more sustainable future.
Frontier technologies including artificial intelligence
WIPO pays particular attention to the interplay between frontier technologies including artificial intelligence (AI) and IP.
The WIPO Conversation on IP and Frontier Technologies provides an open, inclusive forum to engage with and facilitate discussion and knowledge-building among the widest possible set of stakeholders. It leads the global discourse on the impact of frontier technologies on IP, in this fast-moving, complex space. Each year, WIPO usually holds two sessions of the Conversation covering both the uses and applications of frontier technologies to assist IP Offices and IP owners as well as more conceptual policy-based discussions to ensure that the IP systems continue to foster innovation. The five sessions of the WIPO Conversation to date have focused on AI, data, and frontier technologies in IP administration.
WIPO has prepared a paper exploring the (potential) impact of AI on IP policies in areas such as copyright and related rights, patents, trademarks, designs, and overall IP administration. It also maintains an AI and IP strategyclearing house, which collates government instruments (strategies, regulations, etc.) that are relevant to AI, data, and IP.
Cooperating with the International Telecommunication Union (ITU) in the AI for Good initiative
Supporting UNESCO’s work on developing the first global normative instrument on the ethics of AI.
Participating in the work of the Geneva Science and Diplomacy Anticipator (GESDA), and an independent foundation to leverage the anticipative power of science with diplomacy organisations and citizens working in Geneva and around the world.
Alternative dispute resolution and critical internet resources
WIPO’sactivitiesregarding the Domain Name System(DNS) revolve around the protection of trademarks and related rights in the context of domain names. It developed the Uniform Domain-Name Dispute-Resolution Policy (UDRP) with the Internet Corporation for Assigned Names and Numbers (ICANN). Under this policy, WIPO’s Arbitrationand Mediation Center provides dispute resolution services for second-level domain name registrations under generic top-level domains (gTLDs) to which the UDPR applies. The Center also administers disputes under specific policies adopted by some gTLD registries (e.g. .aero, .asia, .travel). In addition, it offers domain name dispute resolution services for over 70 country code top-level domains(ccTLDs). WIPO has developed a ccTLD Program to provide advice to many ccTLD registries on the establishment of dispute resolution procedures. It also contributes to the work carried out within the framework of ICANN in regard to the strengthening of existing trademark rights protection mechanisms or the development of new such mechanisms.
WIPO Online Case Administration Tools, including WIPO eADR (allowing parties in a dispute, mediators, arbitrators, and experts in a WIPO case to securely submit communications electronically into an online docket) and online facilities for meetings and hearings as part of WIPO cases.
Intellectual property rights
Trademarks
WIPO has long been involved in issues related to the protection of trademarks in the context of the DNS. The first phase of the WIPO Internet Domain Name Process, carried out in 1991, explored trademark abuse in second-level domain names, and led to the adoption, by ICANN, of the UDRP. WIPO has also contributed to the development of several trademark rights protection mechanisms applicable to gTLDs (such as legal rights objections, the Trademark Clearinghouse, and the uniform rapid suspension system). The WIPO Arbitration and MediationCenter administers trademark-related dispute resolution cases for several gTLDs and ccTLDs.
Copyright
WIPO is actively contributing to international discussions on the opportunities offered by copyright in the digital environment, especially to developing economies, small and medium enterprises (SMEs) and women entrepreneurs. The organisation administers the InternetTreaties and the Beijing Treaty, which clarify that existing copyright and related rights apply on the internet, and introduce new online rights, while also establishing international norms aimed at preventing unauthorised access to and use of creative works on the internet or other digital networks. The WIPO Accessible Books Consortium furthers the practical implementation of the MarrakeshTreaty to increase the number of books available worldwide in accessible digital formats. WIPO member states are considering topics related to copyright in the digital environment at the multilateral level. WIPO also carries out research and organises seminars and other meetings on aspects concerning challenges and possible solutions for taking advantage of the opportunities offered by copyright and related rights in the digital era.
Given WIPO’s concerns regarding the protection of copyright and related rights on the internet, the organisation is exploring issues related to the roles andresponsibilities of internet intermediaries when it comesto online copyright infringements. The organisation carries out or commissions research and publishes studies on the relationship between copyright and internet intermediaries (such as comparative analyses of national approaches to the liability of Internet intermediaries), and organises events (seminars, workshops, sessions at the World Summit on the Information Society (WSIS) Forum and Internet Governance Forum (IGF) meetings, etc.) aimed at facilitating multistakeholder discussions on the potential liability of internet intermediaries concerning copyright infringements.
Comparative analysis of national approaches of the liability of the internet intermediaries (I and II).
Sustainable development
WIPO is of the view that IP is a critical incentive for innovation and creativity, and, as such, a key to the success of the sustainable development goals (SDGs). The organisation works to enable member states to use the IP system to drive the innovation, competitiveness, and creativity needed to achieve the SDGs. It does so, for instance, through supporting countries in their efforts to build an innovative IP ecosystem, providing legislative advice on updating national IP laws, and supporting judiciary systems in keeping up with technological innovation. WIPO’s contribution to the implementation of the Agenda 2030 is guided by its Development Agenda.
WIPO GREEN – online marketplace for sustainable technologies
COVID-19 Technical Assistance Platform – a one-stop digital platform for technical assistance provided by WIPO, WHO, and WTO on IP, public health, and trade matters related to COVID-19.
Climate change
WIPO’s Global Challenges programme brings together various stakeholders to explore issues related to green technologies and the environment. It hosts WIPO GREEN, a multistakeholder platform aimed to promote innovation and diffusion of green technologies, and it provides analysis of relevant IP issues to facilitate international policy dialogue. The WIPO GREEN platform includes a digital database of green technologies in sectors such as energy, water and transportation. In 2022, WIPO launched the Green Technology Book, a major digital publication to showcase concrete solutions related to climate change adaptation. The report will be fully integrated with the WIPO GREEN database, allowing for continuous additions by technology providers.
WIPO GREEN – online marketplace for sustainable/ green technologies
Digital tools
Here are some examples of the digital tools WIPO uses in relation to its services:
WIPO Online Case Administration Tools, including WIPO eADR (allowing parties in a dispute, mediators, arbitrators, and experts in a WIPO case to securely submit communications electronically into an online docket) and online facilities for meetings and hearings as part of WIPO cases.
WIPO GREEN – online marketplace for sustainable technologies.
WIPO Match– platform that matches seekers of specific IP-related development needs with potential providers offering resources.
WIPO Alert– platform to upload information on entities that infringed copyright at national level.
Electronic Forum– enables the electronic distribution and submission by email of comments concerning preliminary draft working documents and draft reports.
WIPO Connect – enables collective management of copyright and related rights at local and central levels.
ABC Global Book Service – on-line catalogue that allows participating libraries for the blind and organisations serving people who are print disabled to obtain accessible content.
WIPO Knowledge Centre – hosts virtual exhibitions. Recent subjects have included geographical indications, and AI.
Address: Rue de Montbrillant 94, 1201 Genève, Switzerland
Website:
https://www.unhcr.org/
Stakeholder group: International and regional organisations
Established in 1950 after the end of WWII, the United Nations High Commissioner for Refugees is a UN agency mandated to help and protect refugees, internally displaced and stateless people, and to assist in their voluntary repatriation, local integration or resettlement to a third country.
Whereas the majority of its activities take place in the field (given that 90% of its staff is based on the ground) and include, among other things, the provision of protection, shelter, emergency relief, and repatriation, it also works with national political, economic and social actors in order to ensure that refugee policies are enacted and laws are compliant with international frameworks. In addition, the organisation also takes on advocacy activities where it works with governments, non-government actors in order to promote practices and provide assistance to those in need.
As recognition for its work, in 1954, the UNHCR was awarded the Nobel Peace Prize.
Digital activities
The UNHCR’s digital activities centre around its core objective – to aid refugees and displaced persons. The organisation, therefore, has been very active in the area of digital inclusion and digital identity. In this context, the UNHCR, for instance, looks for ways how digital identity can facilitate protection and empowerment of refugees and asylum-seekers. In addition, the Refugee agency has conducted substantial work in the field of privacy and data protection and transition to online learning to ensure the right to education.
Digital policy issues
Digital identities
To promote the inclusion of refugees, internally displaced persons (IDPs), stateless persons and other vulnerable individuals, the UNHCR focuses a part of its work on digital identity. Within this scope, it published in 2018 its “UNHCR Strategy on Digital Identity and Inclusion”. In this document, the UNHCR defines the challenges faced by individuals, in particular, foreigners, migrants, asylum seekers and refugees who lack their legal identity papers. It highlights the advantages brought about by digitalisation and defines three main objectives for achieving the digital inclusion and digital identity: 1) Empower refugees, stateless and forcibly displaced persons to access, among other things, the job market, education and financial services; 2) strengthen states’ capacity to register and document all individuals living on their respective territories and ensure conformity with international standards of data security and privacy; 3) improve service delivery (e.g. delivery of legal and protection) through the use of the Internet and mobile technologies.
From a practical point of view, the Refugee Agency uses Population Registration and Identity Management Ecosystem (PRIMES) which gathers UNHCR’s digital registration, identity management and case management tools into a single internally connected and interoperable ecosystem. The tool makes use of personal information including biographic and biometric data, to provide necessary assistance, protection and services to protection to refugees and other displaced populations.
Online education
Online learning plays also features in UNHCR’s work. In a recent publication titled ‘Supporting Continued Access to Education during COVID-19’, the UNHCR underscored its vital role in advocating for and ensuring the inclusion of refugees in national response plans to ensure the continuity of learning. The document sheds light on some of the activities that it has undertaken in light of the health crisis, including, the launch of online learning platforms in Jordan as well as related education programmes in Uganda.
In the broader context of online education, in its ‘Education 2030: A Strategy for Refugee Inclusion’, the UNHCR highlights the increasingly important role played by digital technologies and proposes the strengthening of policies and practices to promote the development of digital and transferable skills through connected and blended learning
methods. Keeping within the broader approach, in 2016, the UNHCR, together with Arizona State University, initiated the Connected Learning in Crisis Consortium (CLCC). The objective of the initiative is to promote, coordinate and support the provision of quality higher education in contexts of conflict, crisis and displacement through Connected Learning that thanks to the use of information technology combine face-to-face and online learning.
To pursue its action in the domain of access to education, the Refugee Agency runs several platforms. To illustrate, its online platform ‘UNHCR Opportunities’ allows refugees, IDPs and other displaced persons to find accredited higher education academic or scholarship programmes that have been verified by UNHCR. The ‘Learn and Connect’ portal enables UNHCR staff and partners to access a comprehensive set of learning activities.
Sustainable development
The UNHCR is firmly committed to achieving the 2030 Agenda for Sustainable Development. The interplay between digital and development is evident in the Agency’s contributions in the field of digital inclusion. To this end, the UNHCR has published the above-mentioned ‘Strategy on Digital Identity and Inclusion’.
The Agency has also developed Digital Access, Inclusion and Participation programme, to ensure that refugees and other displaced communities have access to digital technology and connectivity, and increasing their participation in Agency’s work. UNHCR’s Innovation Service leads the programme.
The UNHCR has also worked with students and young people to raise awareness on many challenges faced by refugees. For instance, the Agency has launched ‘The MUN Refugee Challenge’ to encourage students worldwide to debate on and shape solutions to numerous refugee crises.
The Refugee agency has recently published a ‘Data Transformation Strategy 2020-2025’ aimed at strengthening its role as a leading authority on data and information related to forcibly displaced and stateless persons.
Address: Chem. de Balexert 7-9, 1219 Genève, Switzerland
Website:
https://southcentre.int
Established in 1995, the South Centre is an intergovernmental policy research think tank composed of and accountable to developing country member states. It researches key policy development issues and supports developing countries to effectively participate in international negotiating processes that are relevant to achieving the sustainable development goals (SDGs). The South Centre promotes the unity of the Global South in such processes while recognising the diversity of national interests and priorities.
The South Centre works on a wide range of issues relevant to countries in the Global South and the global community in general, such as sustainable development, climate change, South-South cooperation (SSC), financing for development, innovation and intellectual property, traditional knowledge, access to medicines, health, biodiversity, trade, investment agreements, international tax cooperation, human rights, gender, and the fourth industrial revolution.
Within the limits of its capacity and mandate, the South Centre also responds to requests for policy advice and technical and other support from its members and other developing countries.
The South Centre has observer status in several international organisations.
Digital activities
Innovation and development is one of the issue areas the South Centre works on. As part of its efforts within this domain, it focuses on information technologies. Moreover, digital issues are also tackled in the domain of, inter alia, taxation and the digital economy, data governance, e-commerce, and the fourth industrial revolution.
The South Centre has produced deliverables/research outputs in the following areas: digital and financial inclusion, digital economy, digital taxation, digital industrialisation, and digital trade, among others.
Additional research will be published on IP and digital-related topics in the coming year.
E-commerce and trade
The digital economy is another issue researched by the South Centre in the context of development. For instance, in 2017 it published an analytical note The WTO’s Discussions on Electronic Commerce, in which it explores the stance of developing countries (i.e. readiness in terms of infrastructure, upskilling, etc.) to engage in cross-border e-commerce. Among other things, it highlights challenges such as low information technology (IT) adoption and the lack of electricity supply that limit the uptake of e-commerce activities in Africa for instance. Another analytical note published that same year tackles the impact of the digital economy on micro, small andmedium-sized enterprises (MSMEs), and looks into the type of e-commerce rules that could best serve the interests of MSMEs.
The South Centre recently published a research paper on the WTO Moratorium on Customs Duties on ElectronicTransmissions. This paper highlights the adverse impacts of the continuing moratorium on developing and least developed countries. Because of the moratorium, almost all developing and least developed countries are losing tariff revenues at a time when they are most needed. With no clarity on the definition of electronic transmissions and thereby on the scope of the moratorium, its continuation can lead to substantive tariff revenue losses for developing and least developed countries in the future.
The South Centre also monitors developments and participates in discussions in the field and across international organisations in Geneva, including the UNCTADeTrade for All initiative.
The taxation of the digital economy is the single biggest issue in international taxation today. Countries around the world are trying to find solutions for taxing Big Tech companies that operate with very different business models owing to which they are able to escape taxation under outdated international tax rules meant for a brick-and-mortar economy. The key solution being negotiated is known as Amount A of Pillar One of the Organisation for Economic Co-operation and Development (OECD)’s Two Pillar solution. The South Centre has been actively involved in Amount A negotiations, briefing its member states and submitting comments on every single set of Model Rules that have been put out for public comment, articulating the concerns and issues of developing countries. In 2022, we published the world’s first set of country-level revenue estimates on Amount A contrasted with the UN solution of Article 12B of the UN Model Tax Convention. The revenue estimates were published for the member states of the South Centre and the African Union, with whom the study was jointly conducted. We are coming up with a revised set of revenue estimates based on the latest version of Amount A for our member states and these will be released in late 2023. In October 2023, we published another Policy Brief titled Beyond the Two Pillar Proposals: A Simplified Approach for Taxing Multinationals, which offers an alternative policy solution different from those of the UN and the OECD.
We also published a Policy Brief in June 2023 titled Taxation of Digital Services: What hope for the African States? which argues that African countries need to improve digital connectivity to be able to collect more taxes under the OECD digital tax solution of Amount A. This is because the revenue sourcing rules of Amount A allocate profits using digital indicators such as viewing of advertisements, IP addresses, etc.
In the UN Tax Committee, we participated in the 26th Session in New York where we mobilised the developing country members through peer exchanges and briefings and also participated in the negotiations to promote the interests of our member states and other developing countries, inter alia, on the taxation of the digital economy.
Ahead of the UN Tax Committee session, we published a study on the taxation of computer software. The study on computer software showed that 34 of the South Centre’s member states could have collected $1 billion in taxes in 2020 from computer software sales had there been the corresponding standards by the UN. The Brief helped mobilise developing country support and bring to a close a 20-year negotiation on the taxation of computer software.
The UNCTAD Intergovernmental Group of Experts on the Digital Economy invited the South Centre to present to UN member states the policy options for taxing the digital economy. Our presentation was so appreciated that the governments of Palestine and Cambodia immediately requested capacity building on the subject.
Given our expertise in the taxation of the digital economy, we co-organised in June 2023 a Group of Twenty (G20)-South Centre event on international taxation. This was on capacity building for Indian tax officials on the Two Pillar solution and the international tax standards being negotiated in the UN. This was also our first G20 event, and was widely praised and appreciated by the Indian participants. We mobilised international tax experts from across Asia, Africa, and Latin America to share their perspectives on these topics with Indian officials.
We partnered with the United Nations Development Programme (UNDP) to co-organise a Capacity Building Workshop on the taxation of the digital economy in May 2023. The two organisations shared the policy options available to Sri Lanka to tax the digital economy, which included a Digital Services Tax. The workshop was so impactful that within a few days the government introduced a digital services tax and in the record time of two months got it passed by Parliament. We remained engaged and provided technical briefs to the Sri Lankan Parliament, particularly the Finance Committees.
We were also invited to participate in the Addis Tax Initiative (ATI) General Assembly in Zambia where we provided capacity building on ATI member states on the taxation of the digital economy. After the workshop, the Finance Ministry of Zambia reached out to the South Centre Tax Initiative (SCTI) for detailed policy advice.
Multiple news channels and agencies regularly solicit the South Centre’s views on the concerns of the developing countries in international tax negotiations on the taxation of the digital economy.
Sustainable development
The South Centre has delved into the interplay between digital technologies and development on several occasions through its research outputs. In 2006, it published an analytical note titled Internet Governancefor Development, arguing that affordable access to the internet allows for better education opportunities, greater access to information, improved private and public services, and stronger cultural diversity. More specifically, the document provided recommendations on issues such as openness (e.g. leaving the policy space open for developing countries), diversity (e.g. multilingualism), and security (e.g. funding of computer security incident response teams (CSIRTs)) to maximise the outcomes of discussions for developing countries at the Internet Governance Forum (IGF).
A year later, the South Centre published the research paper Towards a Digital Agenda for Developing Countries, in which it looks into the conditions, rights, and freedoms necessary for developing countries to benefit from digital and Internet resources. By bringing together several different strands of ongoing discussions and analyses at the national and international levels, it provides a direction for further research and policy analysis by laying the groundwork and creating awareness of the relevance and scope of digital and internet content for policymakers in developing countries.
In 2020, the South Centre continued to research the impact of digital technologies in the context of development. Its research paper The Fourth Industrial Revolution inDeveloping Nations: Challenges and Roadmap tackles trends in emerging technologies such as big data, robotics, and the internet of things (IoT), and identifies challenges, namely, the lack of infrastructure, a trained and skilled workforce, scalability, and funding faced by developing countries. It goes on to propose a strategic framework for responding to the fourth industrial revolution, which focuses on capacity building, technology incubations, scientific development, and policymaking.
Discussions towards the adoption of a Global Digital Compact (GDC) have been included as one of the proposals made by the United Nations Secretary-General (UNSG) in his report Our Common Agenda (A/75/982). The main objective of this proposal is “to protect the online space and strengthen its governance” based on “shared principles for an open, free and secure digital future for all”. The issue of digital governance is quite complex and includes the need to reaffirm the fundamental commitment to connecting the unconnected; avoiding fragmentation of the internet; providing people with options as to how their data is used; applying human rights online; and promoting the regulation of AI.
The need to guarantee the implementation of human rights online requires that discussions leading towards the GDC are conducted with upmost transparency, public disclosure, and accountability. Likewise, the private IT sector must respect human rights, apply human rights due diligence and increased accountability, and allow broader oversight from the state and civil society. In some instances, public-private partnerships (PPPs) can be a useful tool to support an inclusive digital transformation, but public participation and oversight of PPPs, guided by strong principles of transparency and the protection and respect for human rights, are necessary to support the transfer of technology, skills, and knowledge needed to promote an inclusive digital transformation. The South Centre has actively engaged with other partners to strengthen multilateralism in this process and to limit the detrimental impacts of multistakeholderism in global governance.
The South Centre combines expertise in global matters of governance in the discussion of the GDC with the objective of strengthening multilateralism through an intergovernmental process that protects the voices of developing and least-developed countries. We prepared a submission to the GDC on applying Human Rights Online. In addition, our forthcoming research paper considers the discussion on the GDC, the current fragmentation of digital governance from the perspective of developing countries, and the need to increase international cooperationdirected towards digital transformation, while highlighting the need to address climate change, the protection of human rights, and inclusiveness as the most relevant issues for developing countries today.
The Kofi Annan Foundation is an independent not-for-profit organisation, established in Switzerland in 2007 by the late former UN Secretary-General and Nobel Peace Prize laureate, Kofi Annan. Its board is composed of prominent personalities from the public and private sectors, and it has a small team based in Geneva, Switzerland.
The Kofi Annan Foundation wants a fairer and more peaceful world, where no one is left behind, democratic principles and the rule of law are upheld, and divides are bridged through dialogue and international cooperation.
The Foundation works closely with partners from international and regional organisations, foundations, universities, and civil society. It channels expertise, convenes all stakeholders around the table, and forges coalitions of trusted influence that can make change happen.
The Kofi Annan Foundation has three strategic objectives:
Strengthening democracy and elections, because popular legitimacy provides the basis for democratic governance, accountability, and respect for human rights and the rule of law.
Empowering youth to build a peaceful, sustainable future because they are active agents of change and must be given the opportunity to shape the world they will inherit.
Advocating for a more effective, inclusive, and equitable multilateral system, and promoting Kofi Annan’s core belief that structured international cooperation is key to solving challenges in today’s interconnected world.
The Commission proposed a series of actions to mitigate the negative impact of social media on elections and democracy, several of which the Foundation is directly implementing. These include new models to counter political disinformation, pre-electoral pledges regarding digital behaviour and activities, and the gauging of digital vulnerabilities of elections. The Foundation is also mobilising digital tools and platforms to increase the representativeness and inclusivity of elections and democratic decision-making, particularly for young people.
Digital policy issues
Violent extremism
The Extremely Together programme consists of young people from around the world working to counter the impact of extremism in their own communities. An initial cohort of ten impressive leaders has grown over the years to include national hubs in Uganda, Somalia, and soon the Sahel. Digital tools allow these young people to draw on the network and support of the Kofi Annan Foundation and share experiences to improve the impact of their work.
Fostering youth leadership
Sharing the leadership values, wisdom, and lessons of Kofi Annan with the next generation is an important element of the legacy work of the Foundation. Digital tools allow us to reach young people in every corner of the globe who would otherwise not be able to benefit from his advice and that of the people who worked closely with him. Two cohorts of Kofi Annan Changemakers – young leaders from different fields and backgrounds – have now harnessed digital communications tools and platforms to improve their leadership skills and build critical capacities.
Content policy
The Foundation works with civil society, electoral management bodies, and the private sector to develop capacity and tools to counter electoral-related disinformation. It is developing tools to mitigate negative foreign interference in elections and to identify elections at risk from digital threats.
Ethical and democratic leadership WYDE Civic Engagement Accountability Hubs brings together a group of exceptional young leaders from sub-Saharan Africa in a comprehensive digital and in-person training and networking programme to enhance their skills in ethical and democratic leadership, project management, advocacy, and communications and develop pilot actions to put their project ideas into practice with dedicated seed grants.
Supporting election with integrity
Regarding its activities on elections and democracy, the Foundation’s digital work is based on KACEDDA’s findings. The Commission was first established in 2018 and was composed of members from civil society and government, the technology sector, academia, and the media. The objectives of the Commission were to identify and frame the challenges to electoral integrity arising from the global spread of digital technologies and social media platforms, develop policy measures to tackle these challenges and highlight the opportunities that technological change offers for strengthening electoral integrity and political participation, and define and articulate a programme of advocacy to ensure that the key messages emerging from the Commission were widely diffused and debated around the world.
Building a more effective architecture for digital cooperation.
The Foundation facilitates the sharing of lessons and expertise across countries to counter the negative impact of social media on elections, particularly harnessing the potential of South-South partnerships and building the capacity of civil society and electoral stakeholders.
Ensuring the protection of human rights in the digital era.
The Foundation works with electoral stakeholders to mitigate the impact of online disinformation and hate speech, and to ensure threats from the digital space do not undermine citizens’ rights to political participation and that digital tools increase voters’ ability to make informed and educated electoral decisions.
Raising awareness of Kofi Annan’s Legacy
The Kofi Annan Foundation uses digital tools to raise awareness of Kofi Annan’s legacy, by providing electronic access to selected speeches and quotations as well as to a collection of his papers compiled by the City University of New York on our website, and to some of his recorded statements and discussions via our official YouTube channel.
Future of meetings
The Kofi Annan Foundation regularly organises online and hybrid webinars, roundtables, and regional events on a variety of topics including elections in various regions of the world, youth resilience during the pandemic, violence against women in politics, disinformation, the impact of COVID-19 on democracy and elections, and more.
The Foundation makes use of digital tools including Zoom and WhatsApp to connect with our youth leaders and partners around the world and to share information about their programmes as well as speaking and networking opportunities.
Both the Kofi Annan Changemakers and WYDE Civic Engagement Accountability Hubs programmes are hybrid, consisting of online modules of learning, training, and presentations.
The Foundation holds board meetings online, with decisions on programmatic and resource matters taken by members participating remotely. Wealso convene our weekly team meetings in a hybrid manner as well as annual virtual meetings of our Electoral Integrity Initiative.
Kofi Time: The Podcast
Through our podcast, Kofi Time, we promote Kofi Annan’s values and their relevance today to a global audience. In our podcast, Ahmad Fawzi, one of Kofi Annan’s former spokespersons and communications advisors, examines how Kofi Annan tackled a specific crisis and its relevance to today’s world and challenges. Kofi Annan’s call to bring all stakeholders around the table – including the private sector, local authorities, civil society organisations, academia, and scientists – resonates now more than ever with so many who understand that governments alone cannot shape our future.
In the first 10-part series, Ahmad Fawzi interviews some of Kofi Annan’s closest advisors and colleagues including Dr Peter Piot, Christiane Amanpour, Mark Malloch-Brown, Michael Møller, and more. Kofi Time is available on the Kofi Annan Foundation website, SoundCloud, Spotify, and Apple Podcasts.
The SDI is an independent, non-profit foundation established in 2019. In September 2019, the first Swiss Global Digital Summit took place in Geneva to provide a platform to promote in-depth discussions on Ethics and Fairness in the Age of Digital Transformation. This Summit represented the starting point of the Foundation. During the 2020 World Economic Forum in Davos, the SDI celebrated its official launch and the creation of the foundation.
Rooted in Swiss values yet driven by a global vision, the Foundation is headquartered in Geneva, aiming to strengthen and advance a trustworthy digital ecosystem with diverse stakeholders. Its mission is to bring ethical principles and values into digital technologies through concrete projects such as the Digital Trust Label (DTL).
Digital activities
SDI actively works on tangible projects to implement ethical standards in the digital age, with a primary focus on cultivating digital trust.
The awareness of the importance of digital trust is growing. To foster collaboration among like-minded stakeholders, the SDI has compiled a comprehensive report on the digital trust ecosystem. Labels and Certifications for the Digital World – Mapping the International Landscape takes a closer look at 12 of the most relevant initiatives and analyses success factors as well as similarities and differences compared to the Digital Trust Label (DTL) by the SDI. In addition, it provides a regularly updated interactive overview to keep track of the dynamic Digital Trust Ecosystem.
The Digital Trust White Paper provides a comprehensive overview of the dynamic digital trust ecosystem. The compiled knowledge should form the basis for better cooperation and knowledge sharing. Instead of fragmentation, more cooperation is needed to define internationally valid labels and standards. It also provides the theoretical background for the SDI’s ongoing engagement in different working groups, for example, the Working Group on Digital Trust of the World Economic Forum
To assess the Swiss population’s mindset regarding trust in the digital world, a qualitative study Digital Trust from the User’s Perspective was carried out in November 2019.
Trust is at the core of every human interaction, and the relationship we have with technology is no exception. The ongoing digital transformation needs to be founded in digital trust to be successful. Users of the digital space are demanding more and more transparency in the technology they use and caring more about the decisions of companies’ leadership. Hence, to address transparency and trustworthiness in digital technology, the SDI developed the first-of-its-kind DTL. Launched in January 2022, the DTL shows that a digital product or service meets mandatory criteria and thus a certain standard of trustworthiness. It also provides more information and transparency for users regarding four aspects: security, data protection, reliability of the application, and fair user interaction (use of AI).
The DTL builds trust between the users and digital technology providers. It benefits all stakeholders::
Complies with a specific standard and puts the user at the centre: The digital application meets 35 different criteria in 4 dimensions.
Offers more transparency and information: Users understand what happens with their data and whether an algorithm makes a decision.
Showcases responsible companies: The DTL shows that a digital application provider takes its responsibilities towards its users seriously.
Priority in addressing digital trust should be given to digital services that are used in fields where
the handled data is very sensitive and the consequences of using digital services matter greatly;
automated decision-making algorithms are used
there is not much choice whether to use a digital service; and
digital services are rolled out at a high pace and on a large scale.
This particularly concerns digital services in healthcare, the public sector, the media sector, banking and insurance, HR, and the education sector.
Artificial intelligence
Ethical Artificial intelligence
As Generative AI is booming, the SDI is committed to further advancing efforts to guarantee that AI is developed in a secure, inclusive, and trustworthy manner for the good and benefit of all.
As part of ongoing efforts to raise awareness of the importance of digital responsibility and ethics in AI, the SDI has partnered up with the renowned Geneva School of Art and Design (HEAD) to create the interactive experience Adface. The web-based tool uses AI to analyse a person’s face and create a user profile to produce targeted advertisements that fit the assumed profile of the person. This tool shows that AI is already deeply embedded in and influencing everyday life (how AI algorithms influence decisions or automate a person’s decisions) and also how AI algorithms can make incorrect assumptions. Art and design can be valuable allies for raising awareness and stimulating critical thinking around the societal implications of new technologies.
Digital responsibility
The SDI and the Institute for Management Development (IMD) co-developed a resource to help organisations understand Corporate Digital Responsibility (CDR). The CDR Starter Kit, based on insights from top organisations and ongoing IMD research, is here to help businesses kick-start their CDR journey and sustain their digital responsibility efforts. Through lessons, common challenges, inspiration, and additional resources, the Starter Kit facilitates the adoption of CDR within and across organisations.
Digital tools
Start your Digital Trust journey with practical tools!
Digital Trust Criteria Catalogue
An expert group led by the Ecole Polytechnique Fédérale de Lausanne (EPFL) has compiled a catalogue of 35 criteria aimed at building trust for users of digital services. The criteria are based on four categories: security, data protection, reliability, and fair user interaction. The Digital Trust Criteria is the base and inspiration of all the SDI’s projects and trust tools. It is also a clear starting point for other organisations to understand what digital trust is and what they should do to make sure they keep it.
Digital Trust Compass
The Digital Trust Compass is an online self-assessment tool to determine whether your organisation respects and protects the interests of its users and to assess the level of digital trust awareness among end users. It serves as a compass, guiding you along your digital trust journey, and providing the right direction.
Digital Trust Guide
Based on the criteria, the SDI has created a user guide to digital trust. This Digital Trust Guide is designed to assist businesses or organisations that handle user data. The primary objective is to support organisations to establish a robust framework of trust that safeguards the interests of users based on this guide and continue their digital trust journey.
Address: Chemin de Blandonnet 8, 1214 Vernier, Geneva, Switzerland
Website:
https://www.iso.org/iso/home.html
Stakeholder group: International and regional organisations
ISO is the International Organization for Standardization, the world’s largest developer of international standards. It consists of a global network of 170 national standards bodies – our members. Each member represents ISO in its country. The organisation brings together global experts to share knowledge and develop voluntary, consensus-based, market-relevant International Standards. It is best known for its catalogue of almost 25,000 standards spanning a wide range of sectors, including technology, food, and healthcare.
Digital activities
A large number of the international standards and related documents developed by ISO are related to information and communication technologies (ICTs), such as the Open Systems Interconnection (OSI) that was created in 1983 to establish a universal reference model for communication protocols. The organisation is also active in the field of emerging technologies including blockchain, the Internet of Things (IoT), and AI. The standards are developed by various technical committees dedicated to specific areas including information security, cybersecurity, privacy protection, AI, and intelligent transport systems.
Digital policy issues
Artificial intelligence
The joint technical committee of ISO and the International Electrotechnical Commission (IEC) for AI is known as ISO/IEC JTC1/SC 42 Artificial intelligence and is responsible for the development of standards in this area. To date,it has published 20 standards specifically pertaining to AI with 35 others in development. ISO/IEC 42001 is the flagship AI Management System Standard, which provides requirements for establishing, implementing, maintaining, and continually improving an AI management system within the context of an organisation. ISO/IEC TR 24028 provides an overview of trustworthiness in AI systems, detailing the associated threats and risks and addresses approaches on availability, resiliency, reliability, accuracy, safety, security, and privacy. The standards under development include those that cover concepts and terminology for AI (ISO/IEC 22989); bias in AI systems and AI-aided decision-making (ISO/IEC TR 24027); AI risk management (ISO/IEC 23894); a framework for AI systems using machine learning (ISO/IEC 23053); and the assessment of machine learning classification performance (ISO/IEC TS 4213). Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Cloud computing
ISO and IEC also have a joint committee for standards related to cloud computing which currently has 27 published standards and a further 5 in development. Of those published, two standards of note include ISO/IEC 19086-1, which provides an overview, foundational concepts, and definitions for a cloud computing service level agreement framework, and ISO/IEC 22123-3, which specifies the cloud computing reference architecture.Standards under development include those on health informatics (ISO/TR 21332); the audit of cloud services (ISO/IEC 22123-2); and data flow, categories, and use (ISO/IEC 19944 series). Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Internet of things
Recognising the ongoing developments in the field of IoT, ISO has a number of dedicated standards both published and in development, including those for intelligent transport systems (ISO 19079), future networks for IoT (ISO/IEC TR 29181 series), unique identification for IoT (ISO/IEC 29161), Internet of Media Things (ISO/IEC 23093-3), the trustworthiness of IoT (ISO/IEC 30149), and industrial IoT systems (ISO/IEC 30162). IoT security is addressed in standards such as ISO/IEC 27001 and ISO/IEC 27002, which provide a common language for governance, risk, and compliance issues related to information security. In addition, there are 26 standards under development, some of which provide a methodology for the trustworthiness of an IoT system or service (ISO/IEC 30147); a trustworthiness framework (ISO/IEC 30149); the requirements of an IoT data exchange platform for various IoT services (ISO/IEC 30161); and a real-time IoT framework (ISO/IEC 30165). Up-to-date information on the ISO and IEC joint technical committee for IoT (e.g. scope, programme of work, contact details) can be found on the committee page.
Telecommunication infrastructure
ISO’s standardisation work in the field of telecommunications infrastructure covers areas such as planning and installation of networks (e.g. ISO/IEC 14763-2), corporate telecommunication networks (e.g. ISO/IEC 17343), local and metropolitan area networks (e.g. ISO/IEC/IEEE 8802-A), private integrated telecommunications networks (e.g. ISO/IEC TR 14475), and wireless networks. Next-generation networks – packet-based public networks able to provide telecommunications services and use multiple quality-of-service-enabled transport technologies – are equally covered (e.g. ISO/IEC TR 26905). ISO also has standards for the so-called future networks, which are intended to provide futuristic capabilities and services beyond the limitations of current networks, including the internet. Up-to-date information on the joint ISO and IEC technical committee that develops these standards (e.g. scope, programme of work, contact details ) can be found on the committee page.
Blockchain
ISO has published 11 standards on blockchain and distributed ledger technologies: ISO/TR 23455 gives an overview of smart contracts in blockchain and distributed ledger technologies; ISO/TR 23244 tackles privacy and personally identifiable information protection; and ISO 22739 covers fundamental blockchain terminology respectively. ISO also has a further eight standards on blockchain in development. These include those related to: security management of digital asset custodians (ISO/TR 23576); taxonomy and ontology (ISO/TS 23258); and guidelines for governance (ISO/TS 23635). Up-to-date information on the technical committee (e.g. scope, programme of work, contact details, etc.) can be found on the committee page.
Emerging technologies
ISO develops standards in the area of emerging technologies.
Dozens of standards in the area of emerging technologies are those related to robotics. ISO has more than 40 different standards either published or in development that cover issues such as collaborative robots (e.g. ISO/TS 15066); safety requirements for industrial robots (e.g. ISO 10218 series); and personal care robots (e.g. ISO 13482). Autonomous or so-called intelligent transport systems (ITS) standards are developed by ISO’s ITS Technical Committee and include those for forward vehicle collision warning systems (ISO 15623) and secure connections between trusted devices (ISO/TS 21185). Standards are also being developed to address the use of virtual reality in learning, education, and training (e.g. ISO/IEC 23843).
Network security
ISO and IEC standards also address information security and network security . The ISO and IEC 27000 family of standards covers information security management systems and are used by organisations to secure information assets such as financial data, intellectual property, and employee information. For example,ISO/IEC 27031 and ISO/IEC 27035 are specifically designed to help organisations respond, diffuse, and recover effectively from cyberattacks. ISO/IEC 27701 is an extension of ISO/IEC 27001 and ISO/IEC 27002 for privacy information management, and details requirements and guidance for establishing, implementing, maintaining, and continually improving a Privacy Information Management System (PIMS).Network security is also addressed by standards on technologies such as the IoT, smart community infrastructures, medical devices, localisation and tracking systems, and future networks. Up-to-date information on the joint ISO and IEC technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Encryption
As more and more information (including sensitive personal data) is stored, transmitted, and processed online, the security, integrity, and confidentiality of such information becomes increasingly important. To this end, ISO has a number of standards for the encryption of data. For example, ISO/IEC 18033-1, currently under development, addresses the nature of encryption and describes certain general aspects of its use and properties. Other standards include ISO/IEC 19772 which covers authenticated encryption, ISO/IEC 18033-3 which specifies encryption systems (ciphers) for the purpose of data confidentiality, and ISO 19092 which allows for encryption of biometric data used for authentication of individuals in financial services for confidentiality or other reasons. ISO also has standards that focus on identity-based ciphers, symmetric and asymmetric encryption, public key infrastructure, and many more related areas.
Data governance
Big data is another area of ISO standardisation; around 80% of related standards are developed by the ISO/IEC AI committee. The terminology for big-data-related standards is outlined in ISO/IEC 20546, while ISO/IEC 20547-3 covers big data reference architecture. ISO/IEC TR 20547-2 provides examples of big data use cases with application domains and technical considerations and ISO/IEC TR 20547-5 details a roadmap of existing and future standards in this area. Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Digital identities
Digital signatures that validate digital identities help to ensure the integrity of data and authenticity of particulars in online transactions. This, therefore, contributes to the security of online applications and services. Standards to support this technology cover elements such as anonymous digital signatures (e.g. ISO/IEC 20008 series); digital signatures for healthcare documents (e.g. ISO 17090-4 and ISO 17090-5); and blind digital signatures, which is where the content of the message to be signed is disguised, used in contexts where, for example, anonymity is required. Examples of such standards are ISO 18370-1 and ISO/IEC 18370-2.
Privacy and data protection
Privacy and data protection in the context of ICTs is another area covered by ISO’s standardisation activities. One example is ISO/IEC 29101 which describes a privacy architecture framework. Others include those for privacy-enhancing protocols and services for identification cards (ISO/IEC 19286); privacy protection requirements pertaining to learning, education, and training systems employing information technologies (ISO/IEC 29187-1); privacy aspects in the context of intelligent transport systems (ISO/TR 12859); and security and privacy requirements for health informatics (ISO/TS 14441).
Digital tools
ISO has developed an online browsing platform that provides up-to-date information on ISO standards, graphical symbols, publications, and terms and definitions.
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.Ok
Social media channels
The Institute maintains a website providing alerts, blogs, articles, and publications on key issues related to its mission for cyberpeace, and shares video materials and discussion recordings on YouTube channel.
The latest news and developments are shared via:
Facebook @CyberpeaceInstitute
Instagram @cyberpeaceinst
LinkedIn @cyberpeace-institute
X @CyberpeaceInst
Sign up for the monthly newsletter to receive updates about what’s happening at the Institute, as well as news about cyberpeace.