ICCA Cybersecurity Protocol and Arbitration Case Management
The ICCA-NYC Bar-CPR Protocol on Cybersecurity in International Arbitration is useful for practitioners because it turns cybersecurity into a case-management question. It asks participants to think about access, communication, information handling, and risk before sensitive material begins moving through the proceeding.
The problem is that many arbitration matters still run through email and ad hoc file-transfer habits. Even careful teams can lose track of who has access, where a document was stored, or how a file will be removed after the case ends.
A practical distinction
The key mechanism is not a single technology feature. It is disciplined handling of case information. Access controls should reflect the participant list. Communications should reduce unnecessary attachments and public links. Storage and backup should be planned. The end of the case should not leave sensitive information scattered across temporary services.
netADR supports several of these practical expectations: access restrictions, two-factor authentication, encrypted case handling including zero-access encryption by administrators, secure communication, backup systems, vulnerability monitoring, full ZIP export, and automatic deletion 30 days after case closure. This is not a legal opinion on protocol compliance.
For practitioners, the useful test is whether the workflow can be explained to a new participant without forwarding a long archive of messages. If the case record depends on private inboxes, local folders, and temporary links, the procedure is more fragile than it needs to be.
The practical value of ICCA cybersecurity protocol is strongest when it keeps the arbitration record clearer, not when it adds another disconnected tool.
More from Security and Confidentiality
Managing Arbitration Cases
Choosing Arbitration Software
Moving Arbitration Online
International and Institutional Cases
For Independent Arbitrators