Global Cyber Resilience: thematic and sectoral approaches

Abstract

This paper looks beyond notions of cybersecurity and analyses a more holistic approach to fostering resilience in cyberspace. This analysis has multiple goals: First and foremost, it seeks to achieve a common understanding of what resilience in cyberspace means and why it is important as a prerequisite to any collective action. Next, it looks at digital and cyber strategies within the European Union (EU) and at external action to better understand the current European approach to resilience. Then, it breaks down the state of play in order to isolate specific actions that promote resilience in an interconnected digital society. Only by understanding how the EU views resilience, and the capacity-building required to foster it, can methods to promote cyber resilience be discussed at a global level. Thus, both theme-based and sector-based approaches are addressed in this paper. Identifying best practices from companies, sectors, or regions is a way to identify exactly what works to build resilience. Then, with international cooperation and strategic partnerships, these methods can be scaled to make resilience and stability in cyberspace a global goal. This analysis sets up the discussion for key stakeholders to work toward a global cyber resilience regime.

Key points

• Promoting resilience in cyberspace should be a collaborative and global effort.
• Although different actors may have different understandings of what exactly resilience in cyberspace means, there are certain measures that can be promoted everywhere which lead to more resilient societies and digital ecosystems.
• As a key stakeholder, the European Union should foster both internal and external resilience initiatives – especially around measures such as risk management, adaptation, and information-sharing – to protect the stability of cyberspace.
• Investing in an international resilience framework is an effective and far-reaching strategy to strengthen the stability of cyberspace for everyone.

This paper was published as part of the EU Cyber Direct Project