{
"authors": [
"Wyatt Hoffman",
"Duncan Hollis",
"Christian Ruhl"
],
"type": "legacyinthemedia",
"centerAffiliationAll": "dc",
"centers": [
"Carnegie Endowment for International Peace"
],
"collections": [],
"englishNewsletterAll": "ctw",
"nonEnglishNewsletterAll": "",
"primaryCenter": "Carnegie Endowment for International Peace",
"programAffiliation": "TIA",
"programs": [
"Technology and International Affairs"
],
"projects": [],
"regions": [
"North America",
"United States",
"Iran"
],
"topics": [
"Technology"
]
}
Source: Getty
Rather than process fragmentation, the key challenges for cyber norms development derive from the structure of the cyber domain itself and the current alignment of incentives for state behavior.
Source: Lawfare Blog
In October 2019, a major cyberattack on the Republic of Georgia disrupted thousands of government, media and private websites in the country, highlighting the escalating scope of cyber aggression. The following day, the University of Pennsylvania’s Perry World House and the Carnegie Endowment for International Peace convened key stakeholders from academia, industry and policy for a workshop to assess the state of global cyber norms processes. We’ve compiled the takeaways from the workshop, which was held under Chatham House Rules, in a new report. The discussions indicated that while the splintering of cyber norms processes in recent years raises cause for concern, fragmented initiatives provide reason for optimism that norms will eventually solidify.
Last week, the United States, United Kingdom, Australia and a number of European states publicly condemned Russia for the Oct. 28 cyberattacks against Georgia, reportedly attributed to Russia’s military intelligence service, the GRU. A rare example of collective attribution, the condemnation follows a joint statement signed by the U.S. and 26 other states in September 2019 pledging to hold states accountable for “bad behavior in cyberspace.” While this response is a welcome development, such accusations remain a modest response to increasingly flagrant cyber aggression: Indiscriminate cyberattacks like NotPetya, malware targeting critical infrastructure and large-scale cyber-enabled disinformation campaigns all demonstrate the acute need to solidify rules of the road for cyber operations.
Wyatt Hoffman
Former Senior Research Analyst, Cyber Policy Initiative
Wyatt Hoffman was a senior research analyst with the Nuclear Policy Program and the Cyber Policy Initiative at the Carnegie Endowment for International Peace.
Duncan Hollis
Duncan B. Hollis is James E. Beasley Professor of Law at Temple University Law School. He is editor of the award-winning Oxford Guide to Treaties (Oxford University Press, 2012) as well as various articles on securing cyberspace, including (with Martha Finnemore) Constructing Norms for Global Cybersecurity, 110 American J. Int’l Law 425 (2016). Professor Hollis is a Non-Resident Scholar at the Carnegie Endowment for International Peace, an elected member of the American Law Institute, and a member of the OAS Inter-American Juridical Committee.
Christian Ruhl
Christian Ruhl is the program associate for Global Order at Perry World House, the University of Pennsylvania's hub for global affairs.
Carnegie India does not take institutional positions on public policy issues; the views represented herein are those of the author(s) and do not necessarily reflect the views of Carnegie, its staff, or its trustees.
On the last day of the India AI Impact Summit, India signed Pax Silica, a U.S.-led declaration seemingly focused on semiconductors. While India’s accession to the same was not entirely unforeseen, becoming a signatory nation this quickly was not on the cards either.
Konark Bhandari
On January 12, 2026, India's "workhorse," the Polar Satellite Launch Vehicle, experienced a consecutive mission failure for the first time in its history. This commentary explores the implications of this incident on India’s space sector and how India can effectively address issues stemming from the incident.
Tejas Bharadwaj
Connecting real-world AI use cases across sectors such as health, education, agriculture, and livelihoods can help policymakers, innovators, and institutions align around a shared goal. This article looks at a framework ensuring that AI works for everyone.
Shalini Kapoor, Tanvi Lall
This piece examines India’s response to U.S. sanctions and tariffs, specifically assessing the immediate market consequences, such as alterations in import costs, and the broader strategic implications for India’s energy security and foreign policy orientation.
Vrinda Sahai
Pacific Island Countries are at a pivotal moment in their digital journeys. Across the region, there is growing recognition of digital transformation as a key driver of economic growth, resilience, and global connectivity.
Shruti Mittal, Adarsh Ranjan