On April 3 and 4, 2025, France and the United Kingdom convened the second conference of the Pall Mall Process at the Ministry for Europe and Foreign Affairs in Paris. This international initiative, launched in February 2024 in London, brings together a multistakeholder community to address the threat posed by the proliferation and irresponsible use of commercial cyber intrusion tools and services. The Pall Mall Process builds on the work started by the Paris Call for Trust and Security in Cyberspace.
A broad community of representatives from governments, the private sector and civil society have come together to agree practical steps through which to address this shared threat. As of today, 21 participating governments have supported a Code of Practice for States - setting forth political commitments and practical recommendations to address irresponsible use of commercial cyber intrusion capabilities and promote responsible behaviour across the cyber intrusion market. The Code of Practice builds upon the pillars highlighted in the 2024 Pall Mall Process declaration: accountability, precision, oversight and transparency, and draws from the Pall Mall Process consultation on good practices conducted in Autumn 2024. It represents a significant step forward towards the implementation of the United Nations framework on responsible State behaviour in cyberspace. The Code of Practice serves as an important contribution to our joint efforts to enhance the security of our societies, protect human rights and fundamental freedoms and uphold a free, open, peaceful, stable, secure, resilient and accessible cyberspace.
Through the Pall Mall Process, the United Kingdom and France will continue to work with the global multistakeholder community to implement policy options and new practices, track progress, and develop a shared picture for responsible
practice across the commercial market.
In support of the existing international framework for responsible State behaviour in cyberspace, France and the United Kingdom will continue to work with multilateral fora, including in the United Nations, to develop international, multi-stakeholder engagement on the issue. This ongoing work is complementary to our enduring commitment to building cyber resilience around the world.