Under the direct supervision of the Child Protection Specialist (Harmful practices, gender and adolescents), the consultant is expected to work closely with the Technical Working Group, chaired by the Cyber Security Authority (CSA) and composed of relevant government ministries, industry, INGO/CSOs, development partners and UNICEF, in supporting of the following tasks:

Conduct a capacity needs assessment with the full participation of industry:

It aims at identifying specific challenges and opportunities that the industry ecosystem encounter to prevent and tackle online CSEA in compliance with the Cyber Security Act (2020), Act 1038 and the Legislative Instrument, which is being finalized. It will look at the capacity at all levels, from individual to systemic/institutional levels, to improve the process flows and coordination. The assessment will entail a desk review and Key Informant Interviews (KIIs) with the industry and key stakeholders at national, regional and global levels as required to understand how this is operationalized in other jurisdictions. It will help identify the most critical gaps and provide strategic advice on which industry group would benefit from clear operational guidance to keep the scope of the Operational Guidelines focused and practical. The assessment report will include recommendations in terms of the scope of the operational guidelines for industry on prevention from and response to OCSEA . Through this exercise, the consultant is expected to propose 5-10 companies to pilot the operational guidelines with, such as mobile operators, Internet Service Providers, Telecommunication and gaming companies.

Develop the operational guidelines for industry on prevention from and response to OCSEA:

Based on the outcome of the capacity needs assessment, the consultant is expected to develop the operational guidelines with the aim of providing practical guidance for industry to prevent and tackle online CSEA.

• Specific emphasis will be placed on facilitating coordination and linkages between law enforcement, industry and hotlines to fully and effectively report and respond to online CSEA. The hotlines include: the Child Online Protection Reporting Portal, run by the Internet Watch Foundation; the Points of Contact, run by the CSA; the database where the Child Protection Digital Forensic Lab receives referrals from NCMEC; etc.
• The scope can include: timely removal and blocking of CSAM and reporting online CSEA to law enforcement; content transmission to law enforcement while ensuring data protection; guidance on development and adoption of child protection and safeguarding policies for industry; due diligence and remediation that address online CSEA; reporting pathways for users with special consideration for children; guidance on the safety by design approach during the business operations ; etc.
• Consultation and co-creation workshop with the industry, specifically the ICT industry, will be organized to identify, reflect or develop any solutions/tools that could accelerate the Community of Practice
• d. It is critical to ensure alignment with the most recent global, regional and national frameworks and guidelines in the area of child online protection:

• The approach must be guided by/based on international human rights and children’s rights law, including the United Nations Convention of the Rights of the Child (UNCRC) and its Optional Protocols, the General Comment No. 25 (2021) on children’s rights in relation to the digital environment, and the UN Guiding Principles on Business & Human Rights.
• The work should build on existing related industry guidelines such as International Telecommunication Union (ITU) guidelines for industry on child online protection (2020) and other relevant guidance for business, such as the MoCRIA: Child Rights Impact Self-Assessment Tool for Mobile Operators, as well as other frameworks /guidance focused on OCSEA, such as the WeProtect Model National Response. Some other resources include specific modules for industry, such as the Agora course on Child Rights and Business in the Digital Environment: Training for Industry, as well as Legislating for the Digital Age.
• The operational guidelines will be developed based on the promising practices from other countries, such as the Cambodian Child Online Protection Guidelines for the Digital Technology Industry.

Deliver a sensitization and training workshop for industry to prevent and tackle online CSEA:

Based on the operational guidelines, the consultant is expected to develop training materials, including slide decks and any accompanying tools for interactive sessions, as well as measurement (e.g. pre- and post-tests or follow-up evaluation tools, namely a checklist for interviews with the participants after 3 months to understand their knowledge retention). Once training materials are finalized, the consultant will facilitate the sensitization and training workshop for industry and relevant stakeholders. The training will be delivered in the format of Training of Trainers (ToT) to create a cadre of master trainers at the national level. The participants will include, but not limited to, the selected industry staff, the TWG members, law enforcement officers and hotline staff