Cyber Confidence-Building Measures

CBM 13: Effective communication channels

Organization for Security and Co-operation in Europe

OSCEWidely implemented2016

Measure

CBM 13 (2016): Participating States will, on a voluntary basis, conduct activities for officials and experts to support the facilitation of authorized and protected communication channels to prevent and reduce the risks of misperception, escalation, and conflict; and to clarify technical, legal and diplomatic mechanisms to address ICT-related requests. This does not exclude the use of the channels of communication mentioned in Permanent Council Decision No. 1106.

Background: This CBM encourages participating states to voluntarily organize activities to improve the understanding and use of secure and authorized communication channels for managing ICT-related incidents. The goal is to prevent misperceptions or unintended escalation by clarifying how to respond to technical, legal, or diplomatic requests, particularly during times of heightened cyber tension. These efforts complement existing OSCE communication mechanisms, such as those established under the first set of CBMs. The CBM is connected to CBMs 3, 8, and 10 as part of the crisis communication mechanism.

Practice: Adopted by the United States, this CBM has been widely implemented through two main approaches. First, participating states leveraged the existing OSCE Communications Network as a secure and confidential channel for sharing notifications about ICT-related incidents with potential national security implications (CBM 10), avoiding the need to create new infrastructure. Today, most states are connected to the network, with participation steadily increasing. Second, states established nine standardized templates to structure communications - covering incident reporting, information requests, expressing concerns, or seeking consultations - enhancing clarity, consistency, and coordination. Tabletop exercises conducted under CBM 3 further support this CBM by allowing states to practice using the secure channels and reinforcing their operational readiness.

Key Implementation Activities and Resources

  • This CBM is part of a broader crisis communication framework consisting of the Consultation Mechanism (CBM 3), the PoC Directory (CBM 8), and the Communications Network (CBM 10).

  • Resources supporting implementation include nine standardised communication templates, and tabletop exercises that test and refine these crisis communication procedures.