The Organization for Economic Co-operation and Development (OECD) was founded in 1961 by 18 European and North American countries. It has since expanded to include several additional countries and aims to stimulate economic progress and world trade. The OECD developed Security Guidelines in 1992 to foster confidence in information systems and networks, and revised them in 2002 to help policymakers address growing cybersecurity challenges from more sophisticated threats. The guidelines establish nine principles for OECD members and organizations to promote awareness, responsibility, ethical and democratic values, risk assessment, and ongoing reassessment of cybersecurity policies.

1. By:
Pragati
Roll no -13
Msc 1

2. Founding member countries (1961)
Other member countries

3.  Austria
 Belgium
 Canada
 Denmark
 France
 Germany
 Greece
 Iceland
 Ireland
 Italy
Luxembourg
Netherlands
Norway
Portugal
Spain
Sweden
Switzerland
Turkey
Uk
Us

4.  Japan (28th April 1964)
 Finland (28th January 1969)
 Australia (7th June 1971)
 New Zealand (29th May 1973)
 Mexico (18th May 1994)
 the Czech Republic (21st December 1995)
Hungary (7th May 1996)
 Poland (22nd November 1996)
 Korea (12th December 1996)
 the Slovak Republic (14th December 2000).

5. Background :-
 Founded in 1961 by 18 European nation plus the
United States and Canada to stimulate economic
progress and world trade.
 It has expanded over time to include members from
South America and the Asia-Pacific region.
 Most OECD members are high-income economies with
a very high Human Development Index (HDI) and are
regarded as developed countries.

6.  In 2002, these Guidelines were revised to help
policy makers foster security.
 In 1992, the OECD developed the first Security
Guidelines to foster confidence in information
systems. of information systems and networks for
economic and social prosperity in an open and
interconnected technical environment.
 The 2002 Security Guidelines target national public
policy makers in charge of cybersecurity strategies,
as well as leaders of public and private
organisations whose economic and social activities
rely on the digital environment.

7. OCED’s Aim :-
 Promote a culture of security among all
participants as a means of protecting information
systems and networks.
 Raise awareness about the risk to information
systems and networks; the policies, practices,
measures and procedures available to address
those risks; and the need for their adoption
 and implementation.
 Foster greater confidence among all participants in
information systems and networks and the way in
which they are provided and used.

8.  Create a general frame of reference that will help
participants understand security issues and respect
ethical values in the development and implementation
of coherent policies, practices measures and procedures
for the security of information systems and networks.
 Promote co-operation and information sharing, as
appropriate, among all participants in the development
and implementation of security policies, practices,
measures and procedures.
 Promote the consideration of security as an important
objective among all participants involved in the
development or implementation of standards.

9. Principles :-
 1) Awareness
Participants should be aware of the need for
security of information systems and networks and
what they can do to enhance security.
 2) Responsibility
All participants are responsible for the
security of information systems and networks.
 3) Response
Participants should act in a timely and co-
operative manner to prevent, detect and respond to
security incidents.
 4) Ethics
Participants should respect the legitimate
interests of others.

10.  5) Democracy
The security of information systems and
networks should be compatible with essential
values of a democratic society.
 6) Risk assessment
Participants should conduct risk
assessments.
 7) Security design and implementation
Participants should incorporate security as
an essential element of information systems and
networks.
 8) Security management
Participants should adopt a comprehensive
approach to security management.

11.  9) Reassessment
Participants should review and reassess the
security of information systems and networks, and
make appropriate modifications to security
policies, practices, measures and procedures.

12. Challenge:-
 Developing an effective enabling network,
strengthening solid accountability
mechanisms and safeguarding public interest
represent some serious challenges for the
OECD.
 The OECD Restated Job Strategy aims to
formulate pro-employment policies to
improve networking market outcomes.
However, its productivity impact remains
unclear.

13.  In December 2013, the OECD Committee on Digital
Economy Policy (CDEP, formerly ICCP) agreed to
revise the 2002 Recommendation of the Council
concerning Guidelines for the Security of
Information Systems and Networks: Towards a
Culture of Security (Security Guidelines). It also
agreed to start its review of the Recommendation
on the Protection of Critical Information
Infrastructures in December 2014.

14.  Internet becoming an essential platform for
innovation, new sources of growth and social
development.
 The threat landscape changing, both in scale and
in kind, with more sophisticated actors, cyber
crimes, and other sorts of economic and social
disruptions.
 Trends such as digital mobility, cloud
computing, “bring your own device” (BYOD),
social networks and the Internet of
things, blurring the perimeter of information
systems.

15.  To respond to these challenges,
governments are adopting a new generation
of national cybersecurity strategies which
elevate the priority of cybersecurity and
holistically encompass economic and social
objectives of security with sovereignty
aspects such as international security,
intelligence and military issues.

16.  www.oecd.org
 Google.com

17. Thank you !