Charter of Trust

For a secure digital world

Cybersecurity is becoming the most important security topic of the future –
particularly in the age of digitalization.  

image

Telus Tower, 25 York Street, Toronto, October 23, 2018

Protecting Our Infrastructure in a High Tech World

Our motivations

Creating trust in a secure digital world

People and organizations need to trust that their digital technologies are safe and secure; otherwise they won’t embrace the digital transformation. Digitalization and cybersecurity must evolve hand in hand.

We wish to protect the data and assets of individuals and businesses.

Goal 1 of the Charter of Trust

The digital world changes everything. Artificial intelligence and big data analytics are revolutionizing our decision makings; billions of devices are being connected by the Internet of Things and interacting on an entirely new level and scale.

We wish to prevent damage from people, businesses, and infrastructures.

Goal 2 of the Charter of Trust

As much as these advancements are improving our lives and economies, the risk of exposure to malicious cyber attacks is also growing dramatically. Failure to protect the systems that control our homes, hospitals, factories, grids, and virtually all of our infrastructures could have devastating consequences. Democratic and economic values need to be protected against cyber and hybrid threats.

Together we wish to build a reliable basis for trust in a connected and digital world.

Goal 3 of the Charter of Trust

But no entity can take on this topic alone – regardless of how well set up we may be. The powers of politics, business and society must be pooled together – because cybersecurity concerns us all. To discuss the matter, we are using important worldwide forums. Together we will light the way and sign the Charter of Trust, showing how we can make the digital world more secure.

Our answer: the Charter of Trust

Cybersecurity concerns all of us

Cybersecurity is and has to be more than a seatbelt or an airbag here; it's a factor that's crucial to the success of the digital economy. People and organizations need to trust that their digital technologies are safe and secure; otherwise they won't embrace the digital transformation. That's why we are signing together a Charter of Trust bearing the principles that are fundamental to a secure digital world.

Anchor the responsibility for cybersecurity at the highest governmental and business levels by designating specific ministries and CISOs. Establish clear measures and targets as well as the right mindset throughout organizations – “It is everyone’s task”.
 

Companies – and if necessary – governments must establish risk-based rules that ensure adequate protection across all IoT layers with clearly defined and mandatory requirements. Ensure confidentiality, authenticity, integrity, and availability by setting baseline standards, such as

  • Identity and access management: Connected devices must have secure identities and safeguarding measures that only allow authorized users and devices to use them.
  • Encryption: Connected devices must ensure confidentiality for data storage and transmission purposes, wherever appropriate.
  • Continuous protection: Companies must offer updates, upgrades, and patches throughout a reasonable lifecycle for their products, systems, and services via a secure update mechanism.
     

Adopt the highest appropriate level of security and data protection and ensure that it is preconfigured into the design of products, functionalities, processes, technologies, operations, architectures, and business models.
 

Serve as a trusted partner throughout a reasonable lifecycle, providing products, systems, and services as well as guidance based on the customer’s cybersecurity needs, impacts, and risks.

Combine domain know-how and deepen a joint understanding between firms and policymakers of cybersecurity requirements and rules in order to continuously innovate and adapt cybersecurity measures to new threats; drive and encourage i.a. contractual Public Private Partnerships.
 

Include dedicated cybersecurity courses in school curricula – as degree courses in universities, professional education, and trainings – in order to lead the transformation of skills and job profiles needed for the future.
 

Companies – and if necessary – governments establish mandatory independent third-party certifications (based on future-proof definitions, where life and limb is at risk in particular) for critical infrastructure as well as critical IoT solutions.
 

Participate in an industrial cybersecurity network in order to share new insights, information on incidents et al.; report incidents beyond today’s practice which is focusing on critical infrastucture.
 

Promote multilateral collaborations in regulation and standardization to set a level playing field matching the global reach of WTO; inclusion of rules for cybersecurity into Free Trade Agreements (FTAs).

Drive joint initiatives including all relevant stakeholders in order to implement the above principles in the various parts of the digital world without undue delay.

Our partners

Together we will shape Cybersecurity

In order to keep pace with continuous advances in the market as well as threats from the criminal world, businesses and governments need to coordinate their actions in a targeted manner. We are therefore joining together to protect our democratic and economic values against cyber and hybrid threats. In this charter, the signing partners outline the key principles we consider essential for establishing a new charter of trust between society, politics, business partners, and customers.

Error.

{{tweets.small[3].user_name}}

{{tweets.small[3].user_name}}

@{{tweets.small[3].term}}

{{{tweets.small[3].message}}}

{{tweets.small[3].created | parseDate}}
{{tweets.small[1].user_name}}

{{tweets.small[1].user_name}}

@{{tweets.small[1].term}}

{{{tweets.small[1].message}}}

{{tweets.small[1].created | parseDate}}
{{tweets.small[2].user_name}}

{{tweets.small[2].user_name}}

@{{tweets.small[2].term}}

{{{tweets.small[2].message}}}

{{tweets.small[2].created | parseDate}}
{{tweets.small[2].user_name}}

{{tweets.small[2].user_name}}

@{{tweets.small[2].term}}

{{{tweets.small[2].message}}}

{{tweets.small[2].created | parseDate}}
{{tweets.portrait[0].user_name}}

{{tweets.portrait[0].user_name}}

@{{tweets.portrait[0].term}}

{{{tweets.portrait[0].message}}}

{{tweets.portrait[0].created | parseDate}}
{{tweets.small[2].user_name}}

{{tweets.small[2].user_name}}

@{{tweets.small[2].term}}

{{{tweets.small[2].message}}}

{{tweets.small[2].created | parseDate}}
{{tweets.small[0].user_name}}

{{tweets.small[0].user_name}}

@{{tweets.small[0].term}}

{{{tweets.small[0].message}}}

{{tweets.small[0].created | parseDate}}
{{tweets.big[0].user_name}}

{{tweets.big[0].user_name}}

@{{tweets.big[0].term}}

{{{tweets.big[0].message}}}

{{tweets.big[0].created | parseDate}}
{{tweets.small[0].user_name}}

{{tweets.small[0].user_name}}

@{{tweets.small[0].term}}

{{{tweets.small[0].message}}}

{{tweets.small[0].created | parseDate}}
{{tweets.small[4].user_name}}

{{tweets.small[4].user_name}}

@{{tweets.small[4].term}}

{{{tweets.small[4].message}}}

{{tweets.small[4].created | parseDate}}

Signing the Charter of Trust

From the source

On March 8, 2018, the time has come again: During CERAWeek in Houston, Texas, other companies signed the Charter of Trust. After the Munich Security Conference in February 2018, we once again set the pace for binding rules and standards that build trust in cybersecurity and drive forward digitalization globally.

Our PoF feature on Cybersecurity

Working together to strengthen Cybersecurity

Digital connectivity is making our lives easier and boosting business competitiveness. However, the risk of cyber attacks is increasing as well, causing governments and companies to join forces in defense.

image
Find out more in our innovation magazine Pictures of the Future
PoF feature on Cybersecurity