Cyber Capabilities and National Power – A Net Assessment

The report on Cyber Capabilities and National Power provides a qualitative analysis of the cyber capabilities of 15 countries, assessing their impact on national power across seven categories: strategy, governance, intelligence, security, global leadership, and offensive capability. Moreover, it highlights the challenges all countries face in shaping durable policy frameworks for cyberspace, the relative standing of countries in terms of cyber power, and the implications for the global balance of power. The report uses a qualitative and holistic methodology, focusing on national power and offering a comprehensive view of cyber capabilities beyond cybersecurity alone.

Overview

United States

Emphasizes the country’s strong cyber capabilities across various domains, emphasizing its strategic approach to cyber operations, governance structure, intelligence capabilities, security measures, global leadership efforts, and offensive capabilities. The US is positioned as a key player in the global cyber landscape, actively shaping cyber policies and practices to safeguard national interests and address cyber threats effectively.

1. Strategy and Doctrine: The US cyber strategy addresses threats across various domains, supported by national security and Department of Defense strategies.
2. Governance, Command, and Control: Clear mechanisms, policies, and manuals guide the US cyber operations and coordination.
3. Core Cyber-Intelligence Capability: Advanced cyber-intelligence capabilities support US cyber operations and decision-making.
4. Cyber Empowerment and Dependence: The US leverages technology to enhance national capabilities while managing dependencies on vital cyberinfrastructure.
5. Cyber Security and Resilience: The US focuses on security and resilience, protecting infrastructure and networks from cyber threats and continually improving defenses.
6. Global Leadership in Cyberspace Affairs: The US leads global cyberspace affairs, promoting international cooperation and norms and collectively addressing cyber challenges.
7. Offensive Cyber Capability: The US maintains significant offensive capabilities to effectively deter and respond to cyber threats.

United Kingdom

Underscores the country’s strong cyber capabilities, strategic approach to cyber security, robust cyber-intelligence capabilities, collaborative partnerships, investments in research and development, whole-of-society approach to cyber resilience, and active engagement in global cyber affairs. The UK is positioned as a leading player in the cyber domain, focusing on enhancing national cyber defenses and contributing to international cyber security efforts.

1. Strategic Oversight: The UK, a leading cyber state, has a comprehensive cyber strategy to address threats.
2. Cyber-Security Ecosystem: The UK’s cyber-security, led by the NCSC, has robust defense mechanisms.
3. Cyber-Intelligence Capability: The GCHQ centralizes the UK’s strong cyber-intelligence.
4. Partnerships: The UK government partners with industry and academia to enhance cyber-security.
5. Research and Development: The UK invests in cyber research for innovative defenses against evolving threats.
6. Whole-of-Society Approach: The UK uses a collaborative approach to improve cyber-security.
7. Global Engagement: The UK actively contributes to global cyber discussions and cooperation.

Canada

Spotlights the country’s advanced economy, whole-of-society approach to cyber security, mature civil-sector cyber capability, emphasis on digital transformation, and the need for further practical implementation of national resilience policies. Canada’s strong tech economy and proactive stance on digital transformation position it well in the evolving landscape of cyber capabilities and national power.

1. Digitized Middle Power: Canada, a highly digitized middle power, aligns its cyber security approach with its government and foreign policy.
2. Cyber Policies: Canada, like the US and UK, acknowledges diverse stakeholders in its mature cyber policies, supported by suitable laws.
3. Digital Transformation: Actively promoting digital transformation, Canada exploits its strong tech economy to outdo similar-sized economies.
4. National Resilience: Canada could improve its implementation despite a well-structured resilience policy. It depends on other nations for ICT system hardware.

Australia

Underlines the country’s focus on cyber-security strategies, military cyber capabilities, collaborative research efforts, and initiatives to improve cyber security and resilience. Australia’s active engagement in cyber security measures and research positions it as a key player in the global cyber landscape, with a growing emphasis on enhancing its cyber capabilities and resilience.

1. Cyber-Security Strategies: Australia emphasizes national security, commercial cyber security, workforce development, and global citizenship in its strategies, with the Australian Signals Directorate influencing policy.
2. Military Cyber Strategies: Since 2017, Australia has strengthened its information technology and cyber security capabilities.
3. Collaborative Research: Australia collaborates in research across scientific sectors and with military allies, assessing the security of imported technologies.
4. Cyber Security and Resilience: Australia prioritizes cyber security and infrastructure resilience, launching educational campaigns and mitigation strategies.

France

Stresses the country’s robust cyber security strategies, cyber-intelligence capabilities, whole-of-society approach to cyber security, ICT sector strengths, and active space research engagement. France’s focus on innovative cyber security measures, advocacy for regulation, and participation in international collaborations position it as a significant player in the global cyber landscape.

1. Cyber Security Strategies: France’s robust and wide-reaching cyber security is backed by mature institutions and regular budgets, advocating a comprehensive societal approach.
2. Cyber-Security Reach: Unlike the intelligence community, France showcases innovative and effective cyber security, emphasizing regulations to counter cyber threats.
3. Digitization: Despite not leading in digitization, France’s ICT sector is strong and promotes a whole-of-society approach to cyber resilience.
4. Space Research: France, boasting Europe’s largest space ecosystem, announced a NATO Centre of Excellence for space research in Toulouse and actively participates in space initiatives.

Israel

Emphasizes the country’s advanced cyber offensive capabilities, the role of Unit 81 in shaping cyber operations, Israel’s cyberpower in the Middle East, and the emphasis on high-tech human capital development. Israel’s proactive approach to cyber operations, technological innovation, and human capital investment position it as a key player in the global cyber domain, with significant influence in the Middle East region.

1. Cyber Offensive Capabilities: Israel uses proactive cyber operations for national security.
2. Elite Military Unit: Unit 81 contributes to Israel’s cyber capabilities and the tech scene with its expertise.
3. Cyberpower in the Middle East: Israel utilizes its cyberpower to influence regional dynamics and enhance security.
4. High-Tech Human Capital: Israel nurtures its high-tech talent, aiding the growth of its tech sector despite workforce gaps.

Japan

Highlights the country’s focus on cybersecurity strategy, investments in AI for cyber defense, active participation in international cyber cooperation, and efforts in cyber diplomacy. Japan’s commitment to enhancing its cyber capabilities, engaging in international collaborations, and promoting cybersecurity norms underscores its role as a key player in the global cyber landscape.

1. Cybersecurity Strategy: Japan has a comprehensive strategy addressing emerging cyber threats, enhancing resilience, promoting global cooperation, and investing in advanced technologies.
2. AI Investment: Japan has made substantial investments in AI for cyber defense.
3. International Cooperation: Japan partakes in global cyber dialogues and collaborations to bolster its cybersecurity.
4. Cyber Diplomacy: Japan’s proactive cyber diplomacy promotes a rules-based international order in cyberspace, discussing cybersecurity norms, data flows, and information sharing.

China

Underlines the country’s advanced cyber capabilities, investments in cyberinfrastructure, cybersecurity challenges, and active participation in international cyber engagements. China’s evolving role in the global cyber landscape, coupled with its strategic investments in cyber technologies, positions it as a significant player in shaping the future of cyberspace.

1. Cyber Strategy: China’s comprehensive cyber strategy includes defensive, and offensive capabilities and extensive investment in cyber technologies for national security.
2. Cyber Infrastructure: China’s advanced cyberinfrastructure supports AI, IoT, and advanced cyber tools.
3. Cybersecurity Challenges: China grapples with data privacy, cyber espionage, and adherence to international cyber norms.
4. International Engagement: China influences global cyber governance through active participation in international dialogues, norms, data protection, and information-sharing.

Russia

Emphasizes the country’s cyber strategy driven by confrontation with the West, its efforts to address cyber security weaknesses, dependency on foreign ICT corporations, and aspirations for global leadership in cyberspace affairs. Russia’s centralized cyber governance, focus on regulatory measures, and geopolitical considerations shape its approach to cyber capabilities and national power.

1. Cyber Strategy: Russia’s cyber strategy, influenced by Western conflict, views cyber operations as key in information warfare, with centralized governance.
2. Dependency on Foreign ICT: Highly reliant on foreign ICT, Russia’s digital economy lags behind the UK and France. Efforts are made for cyber security improvement through regulation and a sovereign internet.
3. Cyber Security Measures: Russia aims to bolster cyber security via regulatory measures and indigenous digital industry development, though economic limitations may hinder this.
4. Global Cyber Leadership: Russia’s geopolitical stance shapes its cyberspace approach, aiming for global cyber influence and reflecting its strategic goals.

Iran

Stresses the country’s focus on developing cyber offensive capabilities, the presence of state-sponsored cyber actors, proactive responses to cyber threats, and the role of Iran’s intelligence establishment in cyber operations. Iran’s strategic approach to cyber capabilities and willingness to respond to threats underscores its significance in the global cyber landscape.

1. Cyber Offensive Capabilities: Iran is investing in cyber tools for national security and warfare.
2. State-Sponsored Cyber Actors: The Iranian Cyber Army advances Iran’s cyber capabilities under state direction.
3. Cyber Threat Response: Iran’s Armed Forces respond forcefully to cyber threats, indicating strong cyber defense.
4. Cyber Intelligence Operations: Despite challenges, Iran’s intelligence, including the IRGC, drives aggressive cyber operations.

North Korea

Underscores the country’s active engagement in cyber operations, the presence of state-sponsored cyber units, the significant cyber threat landscape North Korea poses, and the international response to address these cyber challenges. North Korea’s strategic use of cyber capabilities and its impact on global cybersecurity underscore the importance of understanding and addressing the country’s cyber activities.

1. Cyber Operations: North Korea heavily uses cyber operations for espionage, sabotage, and financial theft.
2. State-Sponsored Cyber Units: Units like Bureau 121 conduct state-sponsored cyber activities, crucial for their advanced capabilities and attacks.
3. Cyber Threat Landscape: Their malicious cyber activities target financial institutions, infrastructure, and governments, posing a global cybersecurity threat.
4. International Response: The world has responded with sanctions and enhanced cybersecurity cooperation to counter North Korea’s cyber threats.

India

Highlights the country’s strengths as an ICT powerhouse, its investments in cyber surveillance programs, efforts to enhance intelligence cooperation, and challenges related to internet access and gender disparities in technology usage. India’s strategic focus on cyber capabilities and national power underscores its position as a significant global player.

1. Cyber Empowerment: India’s digital economy, valued at US$190 billion, is fueled by a robust tech startup sector. By 2025, core digital sectors may contribute about 10% of GDP.
2. Cyber Surveillance Programs: India’s sophisticated surveillance programs enhance national security and cyber defense.
3. Intelligence Cooperation: Intelligence cooperation practices promote information sharing among agencies, including a Joint Intelligence Committee and Multi-Agency Centers.
4. Cyber Challenges: Despite digital success, India grapples with internet access and gender disparities in tech use.

Indonesia

Underscores the country’s efforts to strengthen its cyber security capacity, the development of a National Cyber Strategy, initiatives to map the cyber policy landscape, and active engagement in international cybersecurity cooperation. Indonesia’s strategic focus on cybersecurity and collaboration with international partners underscores its commitment to enhancing cyber capabilities and resilience in the digital realm.

1. Cyber Security Capacity: Indonesia is enhancing its cyber security, strengthening defenses and responding to cyber threats.
2. National Cyber Strategy: A strategy has been developed to improve cyber resilience and protect critical infrastructure.
3. Cyber Policy Landscape: Key areas for improvement and development are being identified, with initiatives like ID-SIRTII/CC coordinating incident responses.
4. International Engagement: The country participates in international dialogues and cooperation for cybersecurity, reflecting global commitment.

Malaysia

Highlights Malaysia’s regional leadership in cyber security, focus on developing indigenous digital capabilities, investments in cyber defense, and potential for growth in cyber capabilities. Malaysia’s strategic approach to cyber security and economic development underscores its commitment to enhancing cyber resilience and leveraging digital technologies for national advancement.

1. Regional Leadership: Malaysia, a regional cyber security leader, has committed to enhancing its cyber capabilities through strategies for the civil and defense sectors.
2. Cyber Security Policies: Supporting its economic development, Malaysia focuses on indigenous digital-industrial capabilities and a free, innovative digital environment.
3. Cyber Intelligence and Offense: Information on Malaysia’s cyber-intelligence is limited, but 2020 policies emphasized active defense in cyberspace, with investments in improving national security.
4. Potential for Growth: Malaysia, a third-tier cyber power, has potential for growth due to its commitment to cyber-security and digital technologies.

Vietnam

Spotlights the country’s efforts to strengthen its cyber capabilities, governance structures, and policies despite funding constraints and talent shortages. Vietnam’s focus on cyber security and national defense underscores its commitment to enhancing its cyber resilience and protecting its interests in the digital domain.

1. Cyber Security Strategies: Vietnam is boosting its cyberspace power, including the military, with e-government platforms and ICT sector growth. However, funding and talent constraints challenge cyber security.
2. Governance and Policies: Vietnam bolsters the ICT sector and e-government via its authoritarian system. Resources may shift from cyber-skills training to ideological work due to internal subversion worries.
3. Offensive Capabilities: Vietnam’s offensive cyber capabilities are possibly weak, but the covert APT32 group could launch sophisticated cyber attacks.
4. National Defense Focus: Vietnam’s defense strategy includes cyber and information warfare, prioritizing information systems protection and cyberspace sovereignty.

Therefore. Moreover. Hence. Furthermore. Nonetheless. Nevertheless. Henceforth. However. Although. Hreafter. Importantly. Subsequently. First. Later. Lastly.