2.1. Theoretical explanation
If you really want to be good at something, you need to understand the issues at hand thoroughly. You need to be able to see the context, connect the dots, and apply your knowledge in practice. That is the idea behind capacity development – enabling individuals to grasp the subject in question in its full complexity. This is vitally important in the world of digital policy and cybersecurity, in which the pace of development (of both solutions and issues) is increasing. Raising capacities in digital policy helps various stakeholders better navigate through developments related to ICTs and the associated policy implications.
| Capacity building or capacity development? Capacity development and capacity building are two terms often heard in development discussions. The term capacity building was in use before capacity development. One of the primary reasons for the shift in terminology is that capacity building is now seen by some to imply starting at a zero point with the use of external expertise to create something that did not previously exist. This concept does not acknowledge or respect the inherent capacity and ongoing development processes that exist everywhere. Capacity development, on the other hand, emphasises the existence of endogenous development processes in all countries and communities, and addresses the need to support and/or facilitate processes that are already underway. Although there is no universal agreement about which is the most appropriate term, and both are still in common usage, many organisations have moved away from capacity building in favour of capacity development. |
Capacity development is much more than training. Capacity development is often defined as the improvement of knowledge, skills, and institutions for the effective use of resources and opportunities. Widespread on the agendas of international development agencies, capacity development programmes range from institutional and societal to the individual level and include a variety of strategies, from fundraising to targeted training.
Cyber capacity building by definition according to Geneva Centre for Security Sector (DCAF) refers to the development and reinforcement of processes, competences, resources and agreements aimed at strengthening national capabilities, at developing collective capabilities and at facilitating international cooperation and partnerships in order to respond effectively to the cyber-related challenges of the digital age.
Cyber capacity building activities are particularly important when it comes to the prevention of cyber risks and malicious activities in cyberspace such as the protection of systems, infrastructures and more importantly, the protection of citizens. Overall, it comprises both strengthening of institutional capacities (in particular for technical deployment, policymaking, and implementation) and the development of individual competences (skills and abilities pertaining to the information society, including computer literacy, privacy safeguards, etc.). The effectiveness and legitimacy of digital policy and cybersecurity depend on the capacity of nations, organisations, and individuals to meaningfully participate in policy processes. Sufficient capacity in digital policy issues results in more informed policy decisions.
Reflection point
Can you explain in your own words what is capacity building and cyber capacity building?
Resources
Read more about the relationship between cybersecurity capacity building, norms and confidence building measures in a paper by Robert Collet. He argues that international cybersecurity capacity building emerged in the mid-2000s as a mechanism for countries and organisations to assist each other, across borders, in protecting the safe, secure, and open use of the digital environment. In parallel with this practical cooperation, the international community negotiated norms and confidence building measures to support peace and stability in cyberspace. The proposed framework shifts capacity building beyond developed-developing country relationships and stresses the many goals that it serves. The paper explores the relationship between cybersecurity capacity building, norms and confidence building measures. It contends that capacity building does not just support norms and confidence building measures, but is also an instance of them, and it benefits from norms of its own.