Never before has the Munich Security Conference (MSC) faced such a wide variety of issues: War in Europe, escalating geopolitical tensions in the Asia-Pacific region, global supply shocks and energy shortages are just a few headlines currently raising security concerns. From data theft and sabotage of critical infrastructures and political institutions in major democracies to attacks on utilities in war-torn regions, one aspect is central to most of today’s threats: cybersecurity. Unfortunately, cybersecurity is often awarded lower priority than the more tangible realities of the crises themselves. This negligence can be a catalyst for cyberattacks, with dire political, economic and social consequences. 

Cyberspace holds countless opportunities for governments, companies and private individuals alike. But it is not free of dangers, since novel technologies and digital innovations can be exploited by criminals or rogue entities for personal and political gains. Cyberattacks, spyware and ransomware have caused significant damage across a wide range of areas in recent years. Since 2021, ransomware has among other things been used to disrupt national healthcare systems, shut down crucial oil pipelines and incapacitate government agencies. The scale and scope of such attacks is increasing; the cost of cybercrime to the world economy is estimated at as much as $10.5 trillion by 20251. The dangers of insufficient cybersecurity are most dramatic in the context of international conflict: State-sponsored cyberattacks can take on a multitude of forms, ranging from espionage and disinformation to attacks on critical infrastructures and companies, as recently seen in Ukraine.   

Such threats call for international, non-partisan efforts to ensure the crucial security of IT systems against cyberattacks. Based on this premise, Siemens and eight industry partners established the Charter of Trust at the 2018 MSC. The mission of the alliance, which is still in focus today, is to create the trust needed in IT systems for consumers, companies and governments to build a cybersecure future worldwide.  

Rallying to this mission, the CoT now counts 17 multinational and cross-industrial members, with Microsoft joining in November 2022. The CoT has also grown its pool of Associated Partners to establish a global network of regulators, research institutes, universities and think-tanks sharing its vision for a stronger digital security environment. There are now 13 Associated Partners, with 5 new partners joining in 2022: the Cloud Security Alliance, the CyberPeace Institute, the Global Cyber Alliance, the Brazilian Center for International Relations (CEBRI) and the South African Council for Scientific and Industrial Research (CSIR). 

The CoT has spent its first five years focusing on how to protect the data of individuals and businesses and to prevent damage to people, companies and infrastructure, as well as to secure the foundation for confidence as the basis for a flourishing networked, digital world. Among the many measures launched by the CoT, the “Security by Default” principle has invited partners to integrate security concerns as early as the design phase. Members have also committed to pass on baseline cybersecurity requirements to their suppliers, with the aim of enhancing cybersecurity along the entire supply chain. In its efforts to implement a cross-industry approach, the CoT has focused on providing information, training and other resources to small and medium-sized enterprises.  

Trustworthy AI is part of the CoT’s portfolio. A critical aspect of cybersecurity that focuses on the development and deployment of AI systems that are reliable, secure, and transparent. Trustworthy AI can help prevent, detect, and respond to security threats in a responsible and ethical manner. Without trustworthy AI systems, they can turn into security vulnerabilities that can be used in malicious ways. Ensuring trustworthy design and deployment of AI systems is crucial for the overall security of digital systems and infrastructure. 

Looking ahead, the CoT is committed to use its cybersecurity toolbox – baseline requirements, resources and capabilities – to provide all interested stakeholders with unique guidance on how to promote cyber-resilience and navigate complex cybersecurity technology and regulatory rulebooks. Most recently, the CoT published on its website a guideline document for achieving secure development life cycles. The guideline shows how a product or service can be designed within a secure development process and how to integrate the baseline security mechanism. 

Natalia Oropeza, Chief Cybersecurity Officer & Chief Diversity Officer at Siemens: “The Charter of Trust calls for peace, solution-focused policies and international collaboration. We are convinced that only with secure and trusted digital technologies, infrastructures, products, and solutions will we overcome global challenges.” 

Meeting in Munich today on the margins of the 2023 MSC, CoT members will have the opportunity to reflect on the work accomplished since the alliance’s inception and pave a way forward. 

You can follow these discussions virtually by registering here: cot2023.events.dc.siemens.com

Find out more about the Charter of Trust on our website: www.charteroftrust.com/about/  

Follow us on Twitter and LinkedIn.