{
"authors": [
"Tim Maurer",
"Wyatt Hoffman"
],
"type": "other",
"centerAffiliationAll": "dc",
"centers": [
"Carnegie Endowment for International Peace"
],
"collections": [
"Cyber and Digital Policy"
],
"englishNewsletterAll": "ctw",
"nonEnglishNewsletterAll": "",
"primaryCenter": "Carnegie Endowment for International Peace",
"programAffiliation": "TIA",
"programs": [
"Technology and International Affairs"
],
"projects": [],
"regions": [
"Iran"
],
"topics": [
"Security",
"Technology"
]
}
Source: Getty
A look at the emerging and expanding gaps in the governance of private cybersecurity companies and activities and the ways forward and policy options for governments.
Source: Geneva Centre for Security Sector Governance
This paper seeks to identify the emerging and expanding gaps in the governance of private cybersecurity companies and activities and to explore ways forward and policy options for governments. First, it explores the characteristics of typical cyber operations and challenges related to their conduct by private actors. Thereafter, it addresses the governance challenges around cybersecurity and three main departure points for regulation: the fact that geographic scope does not limit cybersecurity companies, that cyber operations can slide from defensive to offensive very quickly; and that cybersecurity services are often exported for the purpose of (or with the knowledge they will be) violating human rights. This section will also integrate perspectives of international law. Finally, the paper lays out suggestions for policy options in relation to international law and existing international normative frameworks. In conclusion, the paper offers a framework and way forward as food for thought in order to address cybersecurity operations in relation to PMSCs.
This analysis was originally published by the Geneva Centre for Security Sector Governance.
Former Senior Fellow, Technology and International Affairs Program
Dr. Tim Maurer was a senior fellow in Carnegie’s Technology and International Affairs program.
Former Senior Research Analyst, Cyber Policy Initiative
Wyatt Hoffman was a senior research analyst with the Nuclear Policy Program and the Cyber Policy Initiative at the Carnegie Endowment for International Peace.
Carnegie India does not take institutional positions on public policy issues; the views represented herein are those of the author(s) and do not necessarily reflect the views of Carnegie, its staff, or its trustees.
In any defense establishment, change is an ongoing process. However, despite the best of intentions, existing bureaucracies, bound by habit and years of socialization, have their limits in implementing transformative change.
Anit Mukherjee
As AI grows more sophisticated, as the supply chains that power it become more contested, and as access to frontier models becomes geopolitically charged, India must begin to ask a different set of questions. Not what applications it can build on someone else’s infrastructure but what the world needs.
Konark Bhandari
The Indian Ocean Region hosts one of the densest concentrations of subsea cables in the world. Yet, despite accounting for a significant share of global internet traffic, India’s participation remains limited.
Charukeshi Bhatt
How is AI reshaping space security, creating governance challenges, and where does international diplomacy stand today?
Tejas Bharadwaj, Almudena Azcárate Ortega
After the chill in ties between 2020 and 2024 that brought India–China relations to their lowest point in several decades, the two countries have engaged each other afresh. This paper argues that there are predominantly four imperatives guiding India’s approach to China, and they exist in an order of priority.
Saheb Singh Chadha