1 Oct 2015 - This Recommendation has been replaced by the
Recommendation of the Council on
Digital Security Risk Management for Economic and Social Prosperity

 

The 2002 Security Guidelines 
 

Download the Guidelines:
English/French (bilingual) Chinese Hungarian Italian Norwegian Polish	Russian Slovak Spanish Swedish Turkish

Adopted in 2002, these Guidelines establish a framework of principles that apply to all participants to enhance the security of information systems and networks in order to foster economic prosperity and social development.

In 2012, the OECD initiated .

More information can be found in the November 2012 report "The Role of the 2002 Security Guidelines: Towards Cybersecurity for an Open and Interconnected Economy"

Most of the work of the OECD in the area of security is based on the Security Guidelines.

 

The implementation of the Guidelines

After their adoption, the OECD monitored their implementation and organised events to share experience and best practices across governments and with the business community and civil society.

This resulted in a report on the Promotion of a Culture of Security for Information Systems and Networks in OECD Countries in 2005.

An OECD-APEC Workshop on Security of Information Systems and Networks was held in Seoul in September 2005

 

See also

Information security and privacy

2002 Security Guidelines - Q&A (2002)

United Nations General Assembly Resolution UN A/RES/57/239 (2002)

Implementation Plan for the OECD Guidelines for the Security of Information Systems and Networks: Towards a Culture of Security (2003)

European Council Resolution on a European Approach towards a culture of network and information security (2003)

APEC Strategy to Ensure Trusted, Secure and Sustainable Online Environment (2005)

The Promotion of a Culture of Security for Information Systems and Networks in OECD Countries (2005)

OECD-APEC Workshop on Security of Information Systems and Networks  - Seoul, 5-6 September 2005

Recommendation of the Council on the Protection of Critical Information Infrastructures(2008)