CICA

In 2021, CICA updated its Catalogue of Confidence Building Measures to include a new priority area on the security of and in the use of information and communication technologies (ICTs). Five cyber CBMs were adopted:

CBM 1 (2021): “Promoting an open, secure, peaceful, and cooperative ICT environment in Asia on the basis of mutual respect, strengthening of contacts and exchanges, deepening of dialogue and cooperation, fighting against threats resulting from the malicious use of ICTs.”

CBM 2 (2021): “Promoting dialogue on confidence-building, stability and risk reduction in the field of security of and in the use of ICTs among CICA member states.”

CBM 3 (2021): “Recognising the importance of peaceful use of ICTs by reducing misunderstanding between CICA member states, promoting trust and confidence.”

CBM 4 (2021): “Sharing information, best practices and raising awareness in the field of security of and in the use of ICTs to address the threats stemming from the use of ICTs.”

CBM 5 (2021): “Improving cooperation to respond to the criminal use of ICTs based on an internationally agreed legal framework.”

Compared to cyber CBMs adopted in other organisations, the CICA measures are relatively broad and focus primarily on establishing common objectives and encouraging cooperation rather than defining specific implementation mechanisms or operational activities.

Since the adoption of the cyber CBMs, implementation has primarily taken place through workshops, expert exchanges, and dialogue activities. Topics have included cybercrime, digital forensics, ICT security awareness, and the secure development of the internet.

China and Russia have played a leading role in advancing this work as co-coordinators of the ICT confidence-building process. Since 2022, they have supported the organisation of activities and discussions related to the implementation of the cyber CBMs.

At present, implementation remains relatively limited and low-profile compared to other regional cyber CBM frameworks. Publicly available information on implementation activities is scarce, and CICA is only occasionally referenced in broader international discussions on cyber diplomacy and cybersecurity cooperation.

The CICA cyber CBMs remain at an early stage of implementation. Their broad formulation makes it difficult to identify clear implementation benchmarks or assess progress in a systematic manner. Instead, implementation is largely reflected through ongoing dialogue, information-sharing, awareness-raising activities, and cooperation among participating states.

The diversity of CICA's membership further shapes implementation. Member states differ significantly in terms of political systems, security priorities, and levels of cyber maturity, making consensus-building an important objective in itself.

• CICA adopted five cyber CBMs in 2021 as part of its broader confidence-building framework.

• The measures focus primarily on dialogue, cooperation, information-sharing, and trust-building.

• Implementation is limited and has mainly taken the form of workshops and expert exchanges.

• Public information on implementation remains limited, making systematic assessment difficult.