{"id":8732,"date":"2026-03-31T17:30:10","date_gmt":"2026-03-31T17:30:10","guid":{"rendered":"https:\/\/godshand.link\/ground_post\/good-practice-guide-on-applying-export-controls-to-transfers-of-commercial-cyber-intrusion-capabilities\/"},"modified":"2026-03-31T17:30:10","modified_gmt":"2026-03-31T17:30:10","slug":"good-practice-guide-on-applying-export-controls-to-transfers-of-commercial-cyber-intrusion-capabilities","status":"publish","type":"ground_post","link":"https:\/\/godshand.link\/en_gb\/ground_post\/good-practice-guide-on-applying-export-controls-to-transfers-of-commercial-cyber-intrusion-capabilities\/","title":{"rendered":"Good Practice Guide on Applying Export Controls to Transfers of Commercial Cyber Intrusion Capabilities"},"content":{"rendered":"<p><br \/>\n<\/p>\n<section class=\"content column\">\n<div class=\"highlighted\">\n<div data-drupal-messages-fallback class=\"hidden\"><\/div>\n<\/div>\n<p>    <a target=\"_blank\" id=\"main-content\"><\/a><\/p>\n<div id=\"sipri-2016-breadcrumbs\" class=\"block block-system\">\n<nav role=\"navigation\" aria-labelledby=\"system-breadcrumb\">\n<h2 class=\"visually-hidden\">Breadcrumb<\/h2>\n<p>\t\t\t\t\t\t<span><br \/>\n          \t\t            \t\t<a target=\"_blank\" href=\"https:\/\/www.sipri.org\/publications\/search\">Publications search<\/a><br \/>\n\t\t\t\t\t<\/span><\/p>\n<\/nav><\/div>\n<div id=\"sipri-2016-page-title\" class=\"block block-core\">\n<h1>\n<span>Good Practice Guide on Applying Export Controls to Transfers of Commercial Cyber Intrusion Capabilities<\/span><br \/>\n<\/h1>\n<\/p><\/div>\n<div class=\"views-element-container block block-views\" id=\"views-block-publications-block-4\">\n<div>\n<div class=\"js-view-dom-id-de4aa1721f47ca7a8b110e1cf93bfa46d50233a280e57e5122f389f8b817ad1e\">\n<div class=\"views-row\">\n<div class=\"views-field views-field-field-image\">\n<div class=\"field-content\">  <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.sipri.org\/sites\/default\/files\/styles\/publications_lareg\/public\/2026-03\/cover_gpg_2026_ccic.png?itok=Z-lQnOgE\" width=\"290\" height=\"435\" alt=\"GPG 2026 CCIC\"><\/p>\n<\/div>\n<\/div>\n<div class=\"views-field views-field-view\"><span class=\"field-content\"><\/p>\n<div class=\"js-view-dom-id-03e6abcc23a0d4877b221774af02f71ccad42f917dfa453950b26ec971893b4b\">\n<p> <span class=\"_ views-row\"><br \/>\n    <span class=\"views-field views-field-title\"><span class=\"field-content\"><a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/dr-mark-bromley\" hreflang=\"en\">Dr Mark Bromley<\/a><\/span><\/span><\/span><\/p>\n<p>   <span class=\"_047 views-row\"><br \/>\n     and <span class=\"views-field views-field-title\"><span class=\"field-content\"><a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/kolja-brockmann\" hreflang=\"en\">Kolja Brockmann<\/a><\/span><\/span><br \/>\n  <\/span><\/p>\n<\/div>\n<p><\/span><\/div>\n<div class=\"views-field views-field-field-year-of-publication\">\n<div class=\"field-content\">March 2026<\/div>\n<\/div>\n<div class=\"views-field views-field-field-publisher-loaction\">\n<div class=\"field-content\">Stockholm<\/div>\n<\/div>\n<div class=\"views-field views-field-field-publisher-name\">\n<div class=\"field-content\">SIPRI<\/div>\n<\/div>\n<div class=\"views-field views-field-field-doi\">\n<p class=\"field-content\"><a target=\"_blank\" href=\"https:\/\/doi.org\/10.55163\/ESHD4578\">https:\/\/doi.org\/10.55163\/ESHD4578<\/a><\/p>\n<\/div><\/div>\n<\/div>\n<\/div><\/div>\n<div id=\"sipri-2016-content\" class=\"block block-system\">\n<div data-history-node-id=\"7814\" class=\"node node--type-publication node--view-mode-full ds-1col clearfix\">\n<div class=\"field-pdf-full-publication field--label-hidden\">\n<div class=\"field-items\">\n<div class=\"field-item button_style\">\n\t<a target=\"_blank\" href=\"https:\/\/www.sipri.org\/sites\/default\/files\/2026-03\/gpg_2026_ccic.pdf\">DOWNLOAD FULL PUBLICATION<\/a>\n      <\/div><\/div>\n<\/div>\n<div class=\"body field--label-hidden\">\n<div class=\"field-items\">\n<div class=\"field-item\">\n<p class=\"p1\"><span style=\"font-size:18px;\">States supporting the Pall Mall Process (PMP) Code of Practice for States have committed to using export controls to help ensure accountability across the market for commercial cyber intrusion capabilities (CCICs) and to mitigate risks of potential irresponsible use of CCICs. Export controls can prevent transfers of CCICs that threaten human rights and national security by enabling the application of risk assessment frameworks to export licence applications, and can improve oversight of the international market for CCICs by enabling the sharing and publishing of export licence approvals and denials. However, the potential application of export controls to the transfer of CCICs is limited by the complexities associated with their establishment, implementation and enforcement, and a lack of guidance to inform national practices.<\/span><\/p>\n<p class=\"p1\"><span style=\"font-size:18px;\">This SIPRI good practice guide aims to strengthen national efforts by PMP Code of Practice supporters by clarifying how export controls can be applied to CCICs and informing multilateral discussions on using export controls to tackle their proliferation and misuse.<\/span><\/p>\n<\/div><\/div>\n<\/div>\n<div class=\"field-contents field--label-above\">\n<div class=\"label\">Table of contents<\/div>\n<div class=\"field-items\">\n<div class=\"field-item\">\n<p>Introduction<\/p>\n<p>Existing multilateral export control frameworks<\/p>\n<p>Establishing controls on transfers of CCICs<\/p>\n<p>Informing CCIC exporters of their licensing obligations<\/p>\n<p>Applying end-use\/end-user controls to transfers of CCICs<\/p>\n<p>Publishing information on the application of controls to transfers of CCICs<\/p>\n<\/div><\/div>\n<\/div>\n<div>\n<h3>ABOUT THE AUTHOR(S)\/EDITORS<\/h3>\n<div class=\"dynamic-block-fieldnode-commentary-about-the-authors field--label-hidden\">\n<div class=\"field-items\">\n<div class=\"field-item\">\n<div class=\"views-element-container\">\n<div class=\"js-view-dom-id-f95a6c434b59d702f22ba09510b7d6bbf57d3309804ff414a1e5d1e9578deb20\">\n<div class=\"views-row\">\n<div class=\"views-field views-field-field-image\">\n<div class=\"field-content\">  <a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/dr-mark-bromley\" hreflang=\"en\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.sipri.org\/sites\/default\/files\/styles\/thumbnail\/public\/Mark%20Bromley.jpg?itok=sL06_bDf\" width=\"100\" height=\"100\" alt=\"Mark Bromley\"><\/p>\n<p><\/a>\n<\/div>\n<\/div>\n<div class=\"views-field views-field-body\">\n<div class=\"field-content\"> <a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/dr-mark-bromley\" hreflang=\"en\">Dr Mark Bromley<\/a> is the Director of the SIPRI Dual-Use and Arms Trade Control Programme.<\/p><\/div>\n<\/div><\/div>\n<div class=\"views-row\">\n<div class=\"views-field views-field-field-image\">\n<div class=\"field-content\">  <a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/kolja-brockmann\" hreflang=\"en\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.sipri.org\/sites\/default\/files\/styles\/thumbnail\/public\/Kolja2.jpg?itok=vO84NITb\" width=\"100\" height=\"100\" alt=\"Kolja Brockmann\"><\/p>\n<p><\/a>\n<\/div>\n<\/div>\n<div class=\"views-field views-field-body\">\n<div class=\"field-content\"> <a target=\"_blank\" href=\"https:\/\/www.sipri.org\/about\/bios\/kolja-brockmann\" hreflang=\"en\">Kolja Brockmann<\/a> is a Senior Researcher in the SIPRI Dual-Use and Arms Trade Control Programme.<\/p><\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n<p><a target=\"_blank\" id=\"back-to-top\" href=\"#\" class=\"btn btn-primary btn-lg back-to-top\" role=\"button\" title=\"Click to return to the top of the page\" data-toggle=\"tooltip\" data-placement=\"left\"><br \/>\n<i class=\"fa fa-chevron-circle-up fa-4x\" aria-hidden=\"true\"><\/i><\/a><br \/>\n  <\/section>\n<p><br \/>\n<br \/><a href=\"https:\/\/www.sipri.org\/publications\/2026\/other-publications\/good-practice-guide-applying-export-controls-transfers-commercial-cyber-intrusion-capabilities?rand=6456\" target=\"_blank\">Source link <\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Breadcrumb Publications search Good Practice Guide on Applying Export Controls to Transfers of Commercial Cyber Intrusion Capabilities Dr Mark Bromley and Kolja Brockmann March 2026 Stockholm SIPRI https:\/\/doi.org\/10.55163\/ESHD4578 DOWNLOAD FULL PUBLICATION States supporting the Pall Mall Process (PMP) Code of Practice for States have committed to using export controls to help ensure accountability across the market for commercial cyber intrusion&hellip;<\/p>","protected":false},"author":99083,"featured_media":8733,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"give_campaign_id":0,"footnotes":""},"tags":[1450,2200,1591,588,2234,587,1801,418,2235,1324,2094],"ground_category":[315,317],"class_list":["post-8732","ground_post","type-ground_post","status-publish","format-standard","has-post-thumbnail","hentry","tag-applying","tag-capabilities","tag-commercial","tag-controls","tag-cyber","tag-export","tag-good","tag-guide","tag-intrusion","tag-practice","tag-transfers","ground_category-2-grounds-tribulation","ground_category-2-2-time-dispute"],"fifu_image_url":"https:\/\/www.sipri.org\/sites\/default\/files\/2026-03\/cover_gpg_2026_ccic.png","_links":{"self":[{"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/ground_post\/8732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/ground_post"}],"about":[{"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/types\/ground_post"}],"author":[{"embeddable":true,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/users\/99083"}],"replies":[{"embeddable":true,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/comments?post=8732"}],"version-history":[{"count":0,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/ground_post\/8732\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/media\/8733"}],"wp:attachment":[{"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/media?parent=8732"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/tags?post=8732"},{"taxonomy":"ground_category","embeddable":true,"href":"https:\/\/godshand.link\/en_gb\/wp-json\/wp\/v2\/ground_category?post=8732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}