Unlocking the

UNIDIR

Cyber Policy
PortalA Comprehensive User Guide

1

C Y B E R P O L I C Y P O R TA L . O R G
2Foreword
Since its launch in January 2019, the UNIDIR Cyber Policy Portal (CPP) has diligently mapped
the cyber policy landscapes of all 193 UN Member States, alongside key Intergovernmental
Organisations and multi-stakeholder and other initiatives. The roots of the CPP extend to 2013
with publication of UNIDIR’s Cyber Index: International Security Trends and Realities.
Originally designed to provide a comprehensive overview of cyber activities at national,
regional, and international levels in a period of rapid evolution in cybersecurity policy, theCyber Index underscored the pressing need for a dynamic digital resource to continuously update policymakers with information on cybersecurity issues. This is how the vision for
UNIDIR’s Cyber Policy Portal was born.
The CPP has garnered broad recognition across UN Member States, Regional Organisations
as well as UN processes focused on International Security in ICTs. In an era where the digitaland physical worlds increasingly intersect amid global tensions, tools promoting transparency and fostering trust among nations are essential. Drawing upon years of data collection anddevelopment informed by consultations with policymakers and the cyber community, the CPP
meets this demand with advanced functionalities designed for easy access and availability inall official languages of the United Nations.
We trust this booklet will assist you in navigating the tool and take advantage of all the greatfeatures it offers. Access thousands of concise summaries covering strategies, policies,
legislations, cooperative initiatives, and more. Dive into a repository of hundreds of PDF
documents available in over 50 languages, and explore insights into hundreds of capacity-building projects. Additionally, access the Survey of National Implementation of the 2015
GGE recommendations to take stock of your national progress and, if you so wish, to shareyour national practices through your national profile on the CPP, supporting transparency andinformation sharing.
In navigating today’s intricate digital landscape, we believe the UNIDIR Cyber Policy Portal
stands as an essential tool for charting these critical waters, facilitating cooperation and trustin cyberspace.

Dr Giacomo Persi Paoli
Head, Security & Technology Programme, UNIDIR

3

Table of Contents
Where can I explore the cybersecurity policy landscape of all United Nations

6

Member States?

4

What information is available on the Portal?

7

Where can I find information about national cybersecurity strategies andimplementation frameworks?

7

Where can I find information about the government agencies responsible
for cybersecurity? Is this available on the Portal?

8

Where can I access information on whether a country has published its positionon the applicability of International Law to cyberspace?

8

I would like to learn more about cooperation activities of a specific country.
Can I find this information on the Portal?

9

Where can I find information about past and current capacity-building projects?

9

Do you map which countries provide or receive capacity-building support?

10

Where can I find information about the efforts of Intergovernmental
Organisations in cyberspace?

10

I’m interested in exploring the strategies of Intergovernmental Organisations.
Is this information available on the Portal?

11

Can I also find information on agency responsible for cybersecurity issues
within the organisation?

11

Does the Portal offer information on the regulations and directives adopted byIntergovernmental Organisations as part of their cyber policy efforts?

12

Does the Portal contain information on the cooperative initiatives
undertaken by the Intergovernmental Organisation?

12

Where can I learn more about Multistakeholder Instruments and12

Other Initiatives in the cyber sphere?
Does the UNIDIR Cyber Policy Portal include features for easy
access to information?

13

Is the information on the Portal available in any other UN official languages?

13

How can I quickly access an overview of all strategies or countries that havereleased their position on the applicability of International Law in cyberspace?

14

How can I find specific documents or information on the Portal?

14

Is there an easy way to compare information between different
States and Intergovernmental Organisations profiles?

15

Would you like to access the profile information offline?

15

I would like to share profile information. What is the best way to do this?

15

How can I access a comprehensive overview of the type of
information available on the Portal?

16

Does the Portal provide more information about other cybersecurity tools?

16

Does the Portal provide access to the National Survey of Implementationof the 2015 GGE Report Recommendations?

16

Is it possible to analyse all national cybersecurity strategies that mentiona specific term?

17

How do you collect the information on the Portal and how can I submit
updates for my country’s profile on the Portal?

17

Who are the donors of the Portal?

18

5

Where can I explore the cybersecurity policy landscape of all United
Nations Member States?
Launched in 2019, the Cyber Policy Portal of the United Nations Institute for Disarmament
Research (UNIDIR) serves as a comprehensive online reference tool, providing detailed
profiles of all 193 UN Member States. It acts as a central hub for information on eachcountry’s cybersecurity policy documents, responsible agencies and departments, legal
frameworks, and cooperation efforts. The Portal offers insights into the cybersecurity policy
landscape through main categories and various subcategories within each profile. It also
includes information on Intergovernmental Organisations, multi-stakeholder instruments,and other initiatives. As a confidence-building tool, it seeks to facilitate informed participation by all relevant stakeholders in policy processes and to enhance trust, transparency, andcooperation in cyberspace.

The UNIDIR Cyber Policy Portal is ago-to resource for understanding themultilateral cyber policy landscape. It
is not only easy to use and navigate,
but rich with information to support
meaningful analysis that ultimately
informs better policymaking.
Katherine Prizeman, Political Affairs Officer,
United Nations Office for Disarmament Affairs(UNODA)

6

What information is available on the Portal?
Each country profile on the Portal includes information on cyber policy landscape of thecountry divided in categories, such as Cybersecurity Policy, Structures, Legislative Frameworks, and Cooperation.

Where can I find information about national cybersecurity strategies
and implementation frameworks?
The Cybersecurity Policy category provides detailed information on each country’s national cybersecurity strategies and policies, including those currently being in the development stages.
Within this category, sub-categories include strategy documents, official documents designed
to outline state positions, policies, and strategies to address cybersecurity and cybersecurity-related matters. Additionally, implementation frameworks subcategory features executionplans that States have adopted to meet their national cyber policy objectives. These frameworks encompass guideline documents as well as standards frameworks at the state level.

Ever since the launch of the Cyber Policy Portal, I have been particularly impressed by
the information opportunities this tool can offer cybersecurity experts and cybersecurity enthusiasts. I believe Portal facilitates the identification of best practices and formulation of effective cybersecurity strategies. Moreover, countries seeking to enhancetheir national position in this field can explore the tool to find lessons learned aboutbuilding efficient public institutions while incorporating the latest cybersecurity
standards.
Corina Moroi, First Secretary, Permanent Mission of the Republic of Moldova to the United Nations, New York7

Where can I find information about the government agencies
responsible for cybersecurity? Is this available on the Portal?
On the Portal, you can find information about relevant Structures, which include National
Centers or Responsible Agencies, Key Positions, Dedicated Agencies, Departments, and
CERT or CSIRT.
It provides comprehensive information on the National Centre or Responsible Agency, which
serves as the primary nodal entity for formulating and/or implementing the State’s cyberpolicy. You will also find details on Key Positions pertinent to the cyber policy of the State andits implementation. Additionally, it covers Dedicated Agencies and Departments, including
the Agencies, Ministries, Departments, and other entities (and their subdivisions) tasked withsupporting and implementing the State’s cyber policy. Furthermore, information is available
on the National Computer Emergency Response Team (CERT) or Computer Security Incident
Response Team (CSIRT), which are the designated teams responsible for addressing cybersecurity threats and incidents at the State level.

Where can I access information on whether a country has published
its position on the applicability of International Law to cyberspace?
The Legal Framework section outlines
relevant legislation of each country andincludes the Views on International Law
category, which details the State’s positionon the application of international law tocyberspace, if available.

8

I would like to learn more about cooperation activities of a specificcountry. Can I find this information on the Portal?
The existing cooperation initiatives involving
a specific country are categorised under
Cooperation. This category features several
subcategories, including Multilateral Agreements, UN processes, Bilateral and Multilateral Cooperation, Select Activities, and information on Membership in Intergovernmental
Organisations.
The Multilateral Agreements subcategory
features international treaties focused on
cyber policy issues. Under UN Processes,
you can explore key dialogues and policy
processes also related to cyber matters. The
Bilateral and Multilateral Cooperation subcategory provides insights into both legallybinding and non-legally binding agreements, dialogues, and exercises concerning
cyber policy that the State has engaged inwith other states. Lastly, the Select Activities subcategory highlights specific activities and engagement efforts undertaken by
the State, such as trainings and other initiatives related to cyber policy.

Where can I find information about past and current
capacity-building projects?
In the Select Activities subcategory of the
Cooperation section, the Portal provides
comprehensive information on capacity
building initiatives. In addition to alreadyexisting information on the Portal, it also
features hundreds of capacity building
projects transferred from GFCE Cybil Portal
to UNIDIR Cyber Policy Portal. These initiatives are easily identifiable by the Cybil logo
displayed in their summaries. Additionally, the Portal’s Filter feature allows users to specifically search for information related to capacity building initiatives. We invite States to highlight
additional capacity building projects that have been implemented or received by using thededicated section on the Survey of National Implementation.

9

Do you map which countries provide or receive
capacity-building support?
The Select Activities provide comprehensive details about
the capacity building projects, indicating whether thecountry is a beneficiary or a funder. The information also
includes a complete list of both the beneficiaries and thefunders involved. Additionally, it provides the project’s startand end dates, along with a direct link to the initiative. The
Filter feature also allows for easy access to detailed information on the beneficiaries andfunders of these initiatives.

Capacity building is too important for us to work in duplicative or
isolated silos and this cooperation serves as a model for leveraging thestrengths of each of our platforms and communities to help countries get
the information and help they need.
Chris Painter, President, Global Forum on Cyber Expertise (GFCE) Foundation Board

Where can I find information about the efforts of Intergovernmental
Organisations in cyberspace?
The UNIDIR Cyber Policy Portal also hosts profiles for several Intergovernmental Organisations, such as the African Union (AU), the Association of Southeast Asian Nations (ASEAN),
the European Union (EU), the Organization of American States (OAS) and the United Nations
among others.

The UNIDIR Cyber Policy Portal is anextremely useful tool to have at our
disposal, as it provides easy access to agreat deal of relevant information
regarding the global landscape as it
relates to policies and other data.
Features such as the interactive map thatallows quick access to countries andfacilitates the search for other partners
are valuable to our member states and to
those of us at the Cybersecurity Program
within the Inter-American Committee
against Terrorism (CICTE) of theOrganization of American States (OAS).
We congratulate UNIDIR on this initiative.
Kerry-Ann Barrett, Cybersecurity Program
Manager, Organization of American States (OAS)10

I’m interested in exploring the strategies of Intergovernmental
Organisations. Is this information available on the Portal?
The profile of the Intergovernmental Organisations (IGOs) encompasses detailed information on its Policy, Structure, Legislation,
and Cooperative efforts. Within the Policy
category, the information is divided into
three main types of documents: Strategy
Documents, Communications, and Other
Documents. In the Strategy Documents
section, you will find documents outlining
IGO’s policy plans, priorities, and principles in cybersecurity and cybersecurity-related matters.
The Communications section features statements from the organisation or its agencies,
detailing positions, commitments, actionplans, and obligations related to cyberpolicy. In the Other Documents you’ll findguidelines that establish frameworks, approaches, and best practices in cyber policy.

Can I also find information on agency responsible for cybersecurity
issues within the organisation?
Like the individual country profiles, the profile for each Intergovernmental Organisation details
the Structures in place, including relevant Specialised Agencies and Key Positions. The Specialised Agencies include the official nodal agencies within the organisation, either established or proposed, tasked with supporting cyber policy-related processes. Examples include
Regional Computer Emergency Response Teams (CERTs), Cybercrime Agencies, Committees, and any Joint Units established within the organisation. Key Positions include positions
pertinent to the organisation’s cyber policy (or aspects thereof) and its implementation.

11

Does the Portal offer information on the regulations and directives
adopted by Intergovernmental Organisations as part of their cyberpolicy efforts?
The Portal features Regulations and Directives adopted by the selected intergovernmental organisation, all of which are accessible under the Legislation category. This
category also includes any views adopted
by the Intergovernmental Organisations
on the applicability of international law incyberspace.

Does the Portal contain information on the cooperative initiatives
undertaken by the Intergovernmental Organisation?
The Portal also features information on the cooperation initiatives of Intergovernmental Organisations, including relevant meetings suchas conferences and dialogues concerning
cyber policy matters. Additionally, this section
covers external collaborations in which theorganisation is involved, along with activities
like joint exercises, training programs, andother initiatives related to cyber policy that theorganisation undertakes.

Where can I learn more about Multistakeholder Instruments andOther Initiatives in the cyber sphere?
The Portal also includes section focusing on
Multistakeholder Instruments and Other
Initiatives. This section includes current multistakeholder initiatives in cyberspace, suchas the Charter of Trust from Siemens, or theParis Call for Trust and Security in Cyberspace, and other initiatives.

12

Does the UNIDIR Cyber Policy Portal include features for easy
access to information?
The UNIDIR Cyber Policy Portal is equipped with several features designed to facilitate easy
access to information. These include a Search Function that helps users quickly find specifictopics or data. The Portal also features a Filter Feature, that allow users to narrow down
the information by various criteria, making it simpler to locate relevant data. Additionally,
there is a Compare Feature that enables users to directly compare cyber policy landscapeof different countries or organisations, providing a comprehensive overview of global cyberpolicy landscape.

Is the information on the Portal available in any other UN
official languages?
The Portal acknowledges
the importance of making
information globally accessible in cyberspace.
It is available in all UN
official languages – Arabic,
Chinese, English, French,
Russian, and Spanish. Boththe Portal’s interface andthe individual summaries on
the profiles have been translated. The interface translations were provided by the UN Translation Unit, while the summaries can be translated by users utilising the built-in translation
feature. This ensures comprehensive accessibility for a diverse global audience.

The Portal’s detailed information on
the cyber policy landscape of all UN
Member States enables Latin American countries to stay informed about
global cyber trends, strategies, andpolicies. This fosters international
cooperation, helps align national
cyber policies with global standards,
and ultimately enhances both regionaland global cybersecurity resilience.
Ambassador Maritza Chan, Permanent
Representative of Costa Rica to the UN in New
York, Chair of the First Committee, UNGA 79

13

How can I quickly access an overview of all strategies or countries
that have released their position on the applicability of International
Law in cyberspace?
To easily find an overview of all strategies or countries that have released their positions on theapplicability of international law in cyberspace, the Portal offers a Filter Feature. Located underthe Browse option on the landing page, this tool allows for tailored searches, enabling quick andstraightforward access to specific data. You can utilise this feature to filter by one or more of thesixteen available categories, such as strategy documents, views on international law, or legislation. Additionally, the filter function includes logical operators like “And” and “Or,” enhancing the
precision of the search. This streamlined approach helps users navigate the vast information on
the Portal efficiently, ensuring that they can quickly find the relevant information.

How can I find specific documents or information on the Portal?
The Portal features a Content Searchfunction that enables users to locate
specific documents and information
by searching through summaries andtitles in state and organisation profiles
using keywords. Simply enter words orphrases relevant to your area of interest,
and you can choose to narrow yoursearch to either state profiles or organisation profiles. This targeted approach helps you quickly and efficiently find the information
you need.

14

Is there an easy way to compare information between different
States and Intergovernmental Organisations profiles?
The Portal offers a Compare
Feature that simplifies theprocess of conducting comparative analyses of cyberpolicy landscapes. Users
can analyse up to threestates or organisations at
the same time. To use thisfeature, click on Compare on the landing page, select the states or organisations you areinterested in, and choose the specific category you want to compare. This feature makes it
straightforward to directly contrast cyber policies across different entities.

Would you like to access the profile information offline?
The UNIDIR Cyber Policy Portal provides a Print as PDF
option that enables users to save profile information in
PDF format. This functionality is ideal for offline access,sharing, and archiving. To use this feature, simply
navigate to the states or organisations profile you
wish to save. Within the profile, you will find the Print
as PDF option, which allows you to generate a PDF ofthe displayed content. The PDF preserves the originalformat and layout of the content, ensuring it is easy toreference when needed.

I would like to share profile information. What is the best way
to do this?
To share a profile from the Portal, simply click
the Share button found on the relevant profile
page. This feature allows you to share theprofile directly on your social media accounts,
via email, or by copying the information to
your clipboard. This option makes disseminating the information straightforward andefficient.

15

How can I access a comprehensive overview of the type of
information available on the Portal?
To locate a comprehensive overview of theinformation available on the Portal, referto the Glossary. This resource provides adetailed list of terms and definitions, offering
clear explanations of key concepts featured
across various sections of the Portal. It specifically details the categories and subcategories present, outlining the types of information you can expect to find under each.

Does the Portal provide more information about othercybersecurity tools?
To help users develop a comprehensive understanding of cybersecurity ladscape, thePortal provides an overview of a range ofvaluable resources. These include the Cybil
Portal from the GFCE, the Brazilian Cybersecurity Portal from Igarapé, the Sharing
Electronic Resources and Laws on Crime(SHERLOC) from the UNODC, among othertools. On the Portal, we provide a briefsummary of each tool’s functions.

Does the Portal provide access to the National Survey of
Implementation of the 2015 GGE Report Recommendations?
The Portal offers access to
the National Survey of Implementation of United
Nations recommendations
on the responsible use of
ICTs by states in the context
of international security.
The
Surveycollates
national take-up of the recommendations from the2015 GGE report, as endorsed by the 2021 OEWG and GGE reports, to assist assessmentof their further development and implementation. The Survey allows UN Member States16

to conduct regular self-assessments of national implementation of the recommendations.
The Survey serves as a baseline assessment tool as well as a tool available to all Member
States to track their progress over time. The Survey also support UN Member States in responding to the General Assembly’s invitation to continue to inform the Secretary-General of their views and assessments on the issue of developments in the field of ICTs in thecontext of international security. Additionally, the available submissions by governments tothis survey can be found under National Survey Submission on nation’s profile on the Portal.

Is it possible to analyse all national cybersecurity strategies thatmention a specific term?
You can analyse all national
cybersecurity strategies andrelated documents within
the Cyber Policy Portal’s
Documents
Database.
This database houses overthousands of documents,
available in over 50 different
languages, and featured on
the Cyber Policy Portal. Additionally, it provides the capability to analyse these documents by the topic labels used tocategorise the content, ranging from critical infrastructure to cybercrime.

How do you collect the information on the Portal and how can I
submit updates for my country’s profile on the Portal?
We collect data for the Portal from open
sources and voluntarily submitted material.
Our team conducts thorough desk researchand regularly reaches out to governments
for their updates. To update your country’s
profile, you can use the Suggest an Updatefeature located on the profile page, which
directs you to our contact form. Alternatively, you can click on Contact Us in the Portal
header. The form allows you to specify thenature of your inquiry. Additionally, you can email us directly at cyberpolicyportal@un.org
for any updates or inquiries.

17

Who are the donors of the Portal?
The development, maintenance and continuous improvement of the Cyber Policy Portal since
its inception in 2019 has been possible thanks to generous support of many donors including
the Governments of Australia, Canada, Czechia, France, Germany, Italy, Japan, the Netherlands, Norway, Switzerland, the United Kingdom and by Microsoft.

Access the Portal

18

Access the Database

Access the Survey

@unidir/unidir/un_disarmresearch

20

Palais des Nations
1211 Geneva, Switzerland/unidirgeneva© UNIDIR, 2024

/unidir

W W W. U N I D I R . O R G