• Research
  • Emissary
  • About
  • Experts
Carnegie Global logoCarnegie lettermark logo
DemocracyIran
  • Donate
{
  "authors": [
    "Tim Maurer",
    "Wyatt Hoffman"
  ],
  "type": "other",
  "centerAffiliationAll": "dc",
  "centers": [
    "Carnegie Endowment for International Peace"
  ],
  "collections": [
    "Cyber and Digital Policy"
  ],
  "englishNewsletterAll": "ctw",
  "nonEnglishNewsletterAll": "",
  "primaryCenter": "Carnegie Endowment for International Peace",
  "programAffiliation": "TIA",
  "programs": [
    "Technology and International Affairs"
  ],
  "projects": [],
  "regions": [
    "Iran"
  ],
  "topics": [
    "Security",
    "Technology"
  ]
}

Source: Getty

Other

The Privatization of Security and the Market for Cyber Tools and Services

A look at the emerging and expanding gaps in the governance of private cybersecurity companies and activities and the ways forward and policy options for governments.

Link Copied
By Tim Maurer and Wyatt Hoffman
Published on Aug 23, 2019
Program mobile hero image

Program

Technology and International Affairs

The Technology and International Affairs Program develops insights to address the governance challenges and large-scale risks of new technologies. Our experts identify actionable best practices and incentives for industry and government leaders on artificial intelligence, cyber threats, cloud security, countering influence operations, reducing the risk of biotechnologies, and ensuring global digital inclusion.

Learn More

Source: Geneva Centre for Security Sector Governance

Abstract

This paper seeks to identify the emerging and expanding gaps in the governance of private cybersecurity companies and activities and to explore ways forward and policy options for governments. First, it explores the characteristics of typical cyber operations and challenges related to their conduct by private actors. Thereafter, it addresses the governance challenges around cybersecurity and three main departure points for regulation: the fact that geographic scope does not limit cybersecurity companies, that cyber operations can slide from defensive to offensive very quickly; and that cybersecurity services are often exported for the purpose of (or with the knowledge they will be) violating human rights. This section will also integrate perspectives of international law. Finally, the paper lays out suggestions for policy options in relation to international law and existing international normative frameworks. In conclusion, the paper offers a framework and way forward as food for thought in order to address cybersecurity operations in relation to PMSCs.

Read Full Text

This analysis was originally published by the Geneva Centre for Security Sector Governance.

About the Authors

Tim Maurer

Former Senior Fellow, Technology and International Affairs Program

Dr. Tim Maurer was a senior fellow in Carnegie’s Technology and International Affairs program.

Wyatt Hoffman

Former Senior Research Analyst, Cyber Policy Initiative

Wyatt Hoffman was a senior research analyst with the Nuclear Policy Program and the Cyber Policy Initiative at the Carnegie Endowment for International Peace.

Authors

Tim Maurer
Former Senior Fellow, Technology and International Affairs Program
Tim Maurer
Wyatt Hoffman
Former Senior Research Analyst, Cyber Policy Initiative
SecurityTechnologyIran

Carnegie does not take institutional positions on public policy issues; the views represented herein are those of the author(s) and do not necessarily reflect the views of Carnegie, its staff, or its trustees.

More Work from Carnegie Endowment for International Peace

  • Trump and Netanyahu speaking
    Commentary
    Emissary
    The Diverging U.S. and Israeli Goals in Iran Are Making the Endgame Even Murkier

    The cracks between Trump and Netanyahu have become more pronounced, particularly over energy and leadership targets.

      • Eric Lob

      Eric Lob

  • Seoul traffic at night
    Commentary
    Emissary
    How the Hormuz Closure Is Testing the Korean President’s Progressive Agenda

    The crisis is not just a story of energy vulnerability. It’s also a complex, high-stakes political challenge.

      Darcie Draudt-Véjares

  • Commentary
    Carnegie Politika
    Why Did Messaging App Telegram Fall From Grace in Russia?

    The history of Telegram’s relations with the Russian state offers a salutary lesson for international platforms that believe they can reach a compromise with the Kremlin.

      Maria Kolomychenko

  • Commentary
    Diwan
    What Does the Strait of Hormuz’s Closure Mean?

    In an interview, Roger Diwan discusses where the global economy may be going in the third week of the U.S.-Israeli war with Iran.

      Nur Arafeh

  • apan's Prime Minister Sanae Takaichi (L) reacts as US President Donald Trump delivers a speech in front of US Navy personnel on board the US Navy's USS George Washington aircraft carrier at the US naval base in Yokosuka on October 28, 2025.
    Article
    Takaichi’s Security Agenda After the Landslide Election

    Backed by a new LDP supermajority, Prime Minister Takaichi aspires to revise Japan’s long-standing security doctrine. Ahead of her visit to Washington, she faces fiscal hurdles for her proposed defense spending while needing to navigate President Trump’s request for naval assets to the Strait of Hormuz.

      • Harukata Takenaka

      Harukata Takenaka

Get more news and analysis from
Carnegie Endowment for International Peace
Carnegie global logo, stacked
1779 Massachusetts Avenue NWWashington, DC, 20036-2103Phone: 202 483 7600Fax: 202 483 1840
  • Research
  • Emissary
  • About
  • Experts
  • Donate
  • Programs
  • Events
  • Blogs
  • Podcasts
  • Contact
  • Annual Reports
  • Careers
  • Privacy
  • For Media
  • Government Resources
Get more news and analysis from
Carnegie Endowment for International Peace
© 2026 Carnegie Endowment for International Peace. All rights reserved.