CBM 10: Multistakeholder approach

Background: This CBM promotes a multistakeholder approach to cybersecurity, fostering inclusive dialogue and cooperation among governments, civil society, academia, the private sector, and the technical community. With much of the digital infrastructure privately owned and private companies often being the primary targets of malicious activity their involvement is indispensable. At the same time, civil society and academia contribute by advancing awareness, supporting capacity-building, guiding the implementation of responsible state behavior, and helping to share cyber threat intelligence.261 Bringing these diverse perspectives together not only strengthens the effectiveness and sustainability of cybersecurity policies but also builds transparency, trust, and shared responsibility.

Practice: So far, CBM 10 has not been a primary focus with explicit activities taking place, however, there has been implicit implementation, but not widely. States have used Working Group meetings to share updates on their national engagement with diverse stakeholders, and related panel discussions have been held in this context. Given its broad scope, CBM 10 can also be understood as an affirmation of the multistakeholder approach, underscoring the importance of inclusive dialogue and collaboration in cybersecurity. Notably, Chile and Canada have actively promoted the participation of non-state stakeholders within the OEWG, setting an example of how this CBM’s objectives can be advanced, even though in an implicit manner. In addition, the OAS has already established strong links with private sector actors and civil society,262 providing a foundation that could be further leveraged to strengthen implementation moving forward.

• Member states have used Working Group meetings and related discussions to exchange experiences on engaging civil society, academia, the private sector, and the technical community in cybersecurity policymaking.

• Implementation is implicitly supported by existing OAS relationships with non-governmental stakeholders, by regional dialogue platforms that promote multi-stakeholder participation in cybersecurity discussions, and divers initiatives on the national levels.