Tools & publications

Fully implementing open standards for network services and functions can prevent abuse in various forms (e.g. phishing and botnet infection). Complete and correct standards compliance can diminish the impact of cybercrime and cyber-attacks and lead to more confidence and trust in the Internet, a prerequisite for innovation and fostering an online economy. To enable and […]

“Better safe than sorry.” Prevention means increasing the security of the system, including through implementing the latest standards. How can we make sure the right players are gathered to discuss the right things and support the community in the right way? A multistakeholder networking platform serves as a vehicle for initiating and coordinating efforts among […]

How can international and regional forums, donors, and development agencies stimulate local ownership of the capacity building programmes they wish to support? How can countries ensure commitment in capacity building efforts?

The National Cybersecurity Awareness Month (NCSAM) is an example of a cybersecurity awareness campaign at national level that builds on the attention provided by declaring a month dedicated to a specific topic to mobilise actors; raise the activity profile; and amplify communication, awareness, and capacity building activities. The campaign focuses on different topics each year. […]

Cooperation, alignment, and coordination with others is beneficial. In planning and organising an awareness campaign, it is advisable to coordinate with other existing national and international awareness campaigns. If stakeholders come together to share materials, and possibly align messages, the impact is amplified. Sharing materials and aligning campaign messages helps to broaden the impact beyond […]

Internet networks are replete with systemic vulnerabilities. CERTs and other trusted  operators require reliable information about their network’s health over time. Various organisations have set up systems to scan networks for vulnerabilities and/or monitor cyber-attacks. Many of these sources are open, but their provenance and collection processes are often opaque. To acquire a truly satisfactory […]

A statistics platform, featuring metrics and data visualisation, allows for the measurement of key indicators of malicious activity and risk conditions, and enables analytical insight about patterns, priorities, and trends for action. Such intelligence can be used by the CERT/CSIRT community, security sector, corporations, and organisations. If the metrics are regularly published in reports about […]

A foundation for internet security is provided by the ecosystem of protocols, standards, technology, practices and organisations that are the internet’s infrastructure. An important contribution to a secure and resilient internet infrastructure is the adoption and deployment of open, security-oriented internet standards. This Global Good Practice on Internet Infrastructure helps policy-makers and political leaders in  […]