CBM 4: Capacity building platform

Background: The effective implementation of cyber norms and agreements depends not only on political will but also on states’ ability to understand, interpret, and operationalize them - underscoring the central importance of capacity development not only for public sector but also for private sector officials. Regional organizations like the OAS play a vital role in this process by ensuring that no state is left behind and by helping to build strong national capabilities. CBM 4 thus exemplifies the OAS’s strong emphasis on capacity building and reflects a region-specific need to expand and deepen cyber-related expertise. It thus emphasizes the development and strengthening of CCB through targeted activities.216

Practice: This CBM is supported by the Cyber Diplomacy Training Program, planned and coordinated by the CICTE Secretariat, which plays a central role in its implementation.217 Over the past years, numerous courses have been organized for officials working on cybersecurity within member states. The trainings vary in thematic focus and are tailored to different CBM-related topics. In recent years, workshops and masterclasses have covered: CBMs in general, international cyber diplomacy, international law and norms in cyberspace, state responses to cyber operations, cyber diplomacy and critical infrastructure, gender and cybersecurity, digital rights and freedoms, IHL in cyberspace, the Programme of Action (PoA), the PoC Directory, and critical cybersecurity infrastructure, among others. The CICTE Secretariat aims to host one such workshop approximately every three months.218 Acknowledging the diverse needs and capacities of its member states, the OAS adapts its training programs to address country-specific challenges. This tailored approach ensures that all states - regardless of cyber maturity - can meaningfully engage in and benefit from the implementation of cyber CBMs.219

For the masterclasses, states nominate participants, with professional profiles prioritized depending on the topic. In particular, the designated PoCs are prioritized for participation, making these trainings a key space for fostering trust and communication. This highlights the synergies between CBMs 2, 3, and 4, as the courses deepen relationships and practical cooperation among PoCs. Since 2017, the OAS has trained over 850 officials through more than 30 courses, reaching participants from over 30 member states.220 Some of these courses are explicitly connected to CBM 4, while others contribute implicitly, reflecting the CBM’s broad scope. Wide implementation can thus be observed. From observation, the development of these efforts can roughly be traced across three phases: Pre-COVID the focus was on general introductory training to address differing levels of cyber maturity. During COVID webseminars were also delivered, however, there was a lack of in-person meetings. Post-COVID more specialized masterclasses were introduced and delivered both online and in person. Currently, the aim is to consolidate knowledge through the development of a standardized curriculum that incorporates previous course content, to establish a shared knowledge baseline and enhance sustainability. Although not yet formally mandated, the curriculum is expected to be launched within the year.

Thematic overlaps between CBM 4 and CBM 5 are frequent and intentional. These programs also impart knowledge relevant to other CBMs, such as CBM 7 and CBM 8. The OAS plays a valuable role in translating global discussions and decisions into practical, region-specific projects, thereby enabling broader and more inclusive participation in the cyber diplomacy ecosystem. CBM 4 efforts are further complemented by numerous national and globally funded capacity-building projects, which often operate on a shorter-term basis and benefit from external funding. While these initiatives do not require permanent structures, they significantly contribute to improving cyber maturity across the region. Taken together, it becomes clear that much of CBM 4’s implementation occurs implicitly through these wide-ranging activities.

The annual working group meetings provide a platform for regular exchange and coordination on these efforts. To further promote transparency and track implementation, the Web Portal serves as a central platform listing workshops and trainings. Currently undergoing an overhaul, the portal will soon include statistics on participation per state and gender balance, linking CBM 4 with the objectives of CBM 7.

• The CICTE Secretariat delivers regular cyber diplomacy workshops, masterclasses, and training courses covering multiple topics to implement this CBM.