National Security Policy Options For Cyber Ecosystem Resilience

National cyber insecurity is a wicked problem that threatens states’ societies, economies, polities, and natural security. In a world of increasing digital dependence, it is essential that states are resilient to the threats targeting and originating from their use of cyberspace. This research uses the metaphor of an ecosystem to conceptualize states’ use of and influence over cyberspace, and identifies four key threats facing cyber ecosystems – critical infrastructure attacks, disinformation campaigns, financially motivated cybercrime and attempts to influence Internet governance. The concept of cyber ecosystem resilience is then defined, and a framework is outlined that can be used by states to identify and implement national security policies that enhance resilience against the identified cyber threats. The value of this framework is then demonstrated by applying it to the identification of a suite of policy options available to states to enhance ecosystem resilience against the two threats of critical infrastructure attacks and disinformation campaigns.