Rather than process fragmentation, the key challenges for cyber norms development derive from the structure of the cyber domain itself and the current alignment of incentives for state behavior.

As cyber threats multiply, efforts to establish international norms for cyber activity have created a disjointed ecosystem. Is the fragmentation a cause for concern or an opportunity to promote cyber stability and security?

Motivating this renewed push for active defense is a growing recognition of the magnitude of the peril that cyberattacks present to the private sector, along with limits on the government’s ability to arrest its growth and bring the perpetrators to justice.

A look at the emerging and expanding gaps in the governance of private cybersecurity companies and activities and the ways forward and policy options for governments.

Markets have been slow to adjust to the multi-dimensional perils of cyber risk.

Real progress has been made in developing an understanding of how to more effectively employ cyber capabilities to achieve specific strategic objectives

Companies have begun to develop a cyber insurance market, offering corporations a mechanism to manage their exposure to these risks. The magnitude of the challenge posed by cyber risk means that governments and insurers must work together closely.

How far are private actors allowed, expected, or even obligated to go when protecting themselves against cyber attacks and other malicious internet activity?

A look ahead to 2019, focusing on the most significant and challenging issues facing the world, specifically the Middle East and North Africa region.

Harnessing the full potential of cyber insurance will be imperative for preventing systemic cyber incidents of concern for governments and the private sector alike.