• Research
  • Strategic Europe
  • About
  • Experts
Carnegie Europe logoCarnegie lettermark logo
EUDemocracy
  • Donate
{
  "authors": [
    "Tim Maurer",
    "Wyatt Hoffman"
  ],
  "type": "other",
  "centerAffiliationAll": "dc",
  "centers": [
    "Carnegie Endowment for International Peace"
  ],
  "collections": [
    "Cyber and Digital Policy"
  ],
  "englishNewsletterAll": "ctw",
  "nonEnglishNewsletterAll": "",
  "primaryCenter": "Carnegie Endowment for International Peace",
  "programAffiliation": "TIA",
  "programs": [
    "Technology and International Affairs"
  ],
  "projects": [],
  "regions": [
    "Iran"
  ],
  "topics": [
    "Security",
    "Technology"
  ]
}

Source: Getty

Other

The Privatization of Security and the Market for Cyber Tools and Services

A look at the emerging and expanding gaps in the governance of private cybersecurity companies and activities and the ways forward and policy options for governments.

Link Copied
By Tim Maurer and Wyatt Hoffman
Published on Aug 23, 2019

Source: Geneva Centre for Security Sector Governance

Abstract

This paper seeks to identify the emerging and expanding gaps in the governance of private cybersecurity companies and activities and to explore ways forward and policy options for governments. First, it explores the characteristics of typical cyber operations and challenges related to their conduct by private actors. Thereafter, it addresses the governance challenges around cybersecurity and three main departure points for regulation: the fact that geographic scope does not limit cybersecurity companies, that cyber operations can slide from defensive to offensive very quickly; and that cybersecurity services are often exported for the purpose of (or with the knowledge they will be) violating human rights. This section will also integrate perspectives of international law. Finally, the paper lays out suggestions for policy options in relation to international law and existing international normative frameworks. In conclusion, the paper offers a framework and way forward as food for thought in order to address cybersecurity operations in relation to PMSCs.

Read Full Text

This analysis was originally published by the Geneva Centre for Security Sector Governance.

About the Authors

Tim Maurer

Former Senior Fellow, Technology and International Affairs Program

Dr. Tim Maurer was a senior fellow in Carnegie’s Technology and International Affairs program.

Wyatt Hoffman

Former Senior Research Analyst, Cyber Policy Initiative

Wyatt Hoffman was a senior research analyst with the Nuclear Policy Program and the Cyber Policy Initiative at the Carnegie Endowment for International Peace.

Authors

Tim Maurer
Former Senior Fellow, Technology and International Affairs Program
Tim Maurer
Wyatt Hoffman
Former Senior Research Analyst, Cyber Policy Initiative
SecurityTechnologyIran

Carnegie does not take institutional positions on public policy issues; the views represented herein are those of the author(s) and do not necessarily reflect the views of Carnegie, its staff, or its trustees.

More Work from Carnegie Europe

  • Paper
    Assessing Information Ecosystems: How Governments Can Get Ahead of Hybrid Threats

    The hybrid warfare landscape is evolving rapidly, leaving policymakers without clear strategies. To better inform their work in addressing emerging challenges, governments must dig deeper into the underlying dynamics at play.

      Raluca Csernatoni, Alicia Wanless

  • Commentary
    Strategic Europe
    Why Russia Could Escalate Hybrid Warfare Against Europe

    Mounting economic strain and battlefield losses will not necessarily make the Kremlin less dangerous. They could instead push Moscow toward a more aggressive hybrid campaign designed to test NATO’s Eastern flank, exploit allied hesitation, and fracture European resolve.

      Maksym Beznosiuk

  • Commentary
    Strategic Europe
    Taking the Pulse: Enough with the Annual NATO Summits, Already?

    Over the past ten years, NATO has held almost as many summits as it did during the entirety of the Cold War. Are they still useful, or is it time to stop holding annual meetings?

      • Rym Momtaz

      Rym Momtaz, ed.

  • Romania Bulgaria Turkey Black Sea naval
    Commentary
    How NATO Became Anchored in the Black Sea

    As Russia's war on Ukraine drags on, NATO is expanding its footprint in the Black Sea. Turkey, Romania, and Bulgaria are upgrading their fleets and deepening trilateral cooperation.

      Dimitar Bechev

  • Agentic AI Anthropic bot
    Paper
    When AI Agents Attack: Autonomous Cyber Operations and Europe’s Governance Gap

    Autonomous AI agents are increasingly prevalent in cyberspace. The EU needs a real-time monitoring strategy, to invest in AI defenses, and to reduce its strategic dependence on U.S. frontier models.

      Raluca Csernatoni, Patryk Pawlak

Get more news and analysis from
Carnegie Europe
Carnegie Europe logo, white
Rue du Congrès, 151000 Brussels, Belgium
  • Research
  • Strategic Europe
  • About
  • Experts
  • Projects
  • Events
  • Contact
  • Careers
  • Privacy
  • For Media
  • Gender Equality Plan
Get more news and analysis from
Carnegie Europe
© 2026 Carnegie Endowment for International Peace. All rights reserved.