Search

Begin New Search Topic Cybersecurity Political Geography Europe Publication Year within 3 Years Publication Year within 1 Year Publication Year within 5 Years Publication Year within 10 Years

1. Building Resilience? The Cybersecurity, Economic & Trade Impacts of Cloud Immunity Requirements

Author:
Matthias Bauer
Publication Date:
03-2023
Content Type:
Policy Brief
Institution:
European Centre for International Political Economy (ECIPE)
Abstract:
EU Member States should call on the EU’s Cybersecurity Agency (ENISA) and the European Commission to abandon immunity requirements in the proposed EU Cloud Certification Scheme (EUCS). With immunity requirements in the EUCS, the EU risks opening a Pandora’s box, paving the way for data localisation, foreign ownership restrictions, and local establishment requirements in digital industries globally leading to rising trade tensions. ENISA’s current proposal could increase policymakers’ appetite for data localisation in the EU. It would empower the European Commission and Member State authorities to exclude foreign businesses from domestic cloud services markets and set a dangerous precedent for any data-intensive sector. The list of “sectors of high criticality” could be logically extended to both existing services (e.g., financial services) and to new technologies and business models, such as IoT in the energy and healthcare sectors, and autonomous driving in the transport sector. Non-EU jurisdictions would be pressured to respond in kind. EUCS immunity requirements would increase cloud adopters’ exposure to cybersecurity risks. Data localisation often creates obstacles to an integrated management approach towards cybersecurity risks. Country of headquarter and foreign ownership restrictions in the proposed EUCS risk removing global frontier cybersecurity technologies from Member State markets. Excluding these and other EU and non-EU companies from EU Member States could result in a long-lasting security deficit of EU cloud adopters vis-à-vis organisations that are still able to use reliable and often best-practice cloud services offered by providers from outside EU Member States. Immunity requirements in the EUCS are discriminatory by design. They could provoke retaliatory measures by EU trading partners, either unilaterally or through WTO or bilateral FTA (e.g., UK-EU) Dispute Settlement. Local establishment requirements and foreign ownership restrictions would by design discriminate against foreign cloud providers. US-headquartered companies, which currently serve more than 75% of the EU market, would be most affected by EU immunity requirements.[1] Depending on US preferences and the scope of the proposed EUCS, the EU could be subject to retaliatory tariffs of up to USD 12 billion worth of EU goods exports or equivalent restrictions for EU services exports to the US. Other governments could lodge complaints via the WTO as well (e.g., Singapore, Japan, Canada and others, where cloud development is advancing rapidly). EU suppliers are currently in no position to manage a broad-based transition to cloud, and thus such requirements would delay significant efficiency and security gains that current foreign suppliers could offer. A blanket exclusion of non-EU cloud vendors would also likely undermine Europe’s objective to achieve a 75% cloud adoption rate for EU enterprises. Sensitive European businesses and public sector organisations would have to delay migration and make do with legacy systems for a very long time. Contrary to large countries, these negative impacts would be much more pronounced for smaller EU Member States, which lack the presence of large domestic incumbents and generally rely much more on an open international trading regime for digital services. ENISA’s cloud certification scheme should be limited to technical and transparency requirements. Immunity requirements for non-personal data should be addressed in bilateral initiatives such as the EU-US Trade and Technology Council (TTC) or agreements requiring a company that sought to offer services of the highest level of sensitivity to be headquartered in a country granted adequacy with EU data protection rules, or a country that is an adherent to the OECD’s Trusted Government Access principles, or (concerning the US) a participant in the upcoming Trans-Atlantic Data Privacy Framework. Excluding foreign companies from operating in the EU would have far-reaching consequences. If that is the intent, it should require a sound legal analysis and the decision should be taken through a formal legislative procedure at the EU level.
Topic:
Economics, Markets, European Union, Cybersecurity, Digital Economy, Trade, and Resilience
Political Geography:
Europe

2. Allies Help Those Who Help Themselves: How Estonia and Japan Approach Deterrence

Author:
Yoko Iwama, Tetsuo Kotani, Sugio Takahashi, Tony Lawrence, and Henrik Praks
Publication Date:
09-2023
Content Type:
Special Report
Institution:
International Centre for Defence and Security - ICDS
Abstract:
Up until the blatant act of Russian aggression in Ukraine in 2022, the West had been gradually shifting its attention towards East Asia, with China seen as the primary challenge of the first half of the 21st century. The new context requires a thorough reassessment of international security architecture by all national stakeholders. This, in turn, offers Estonia and Japan the opportunity to enrich their security perspectives on common strategic threats, as well as on broader geopolitical shifts caused by Russia and China. This report introduces several aspects of these revolutionary developments, their background, and their potential implications, some of which have already been reflected in the updated strategic documents unveiled by US and Japanese defence communities. Taken together, these documents make a case for an enhanced partnership between Japan, the US, and Europe that would prepare like-minded allies to respond to any security crisis. In the eventuality of a crisis resulting in an actual military confrontation, the report compares China’s missile supremacy and Japan’s long-range standoff maritime firepower strategies by grounding this analysis in the theory of victory. Charting a more favourable course forward, the report assesses the current state of deterrence in the Baltics by detailing the key developments in regional defence posture and planning, with a clear shift towards forward defence. Centring on emerging cross-border risks posed by hybrid warfare and using Estonia as a case study for vulnerabilities, the report proposes ways to mitigate these risks by advancing the role of deterrence. The report’s recommendations are as follows: To establish a cooperative format between NATO and Indo-Pacific nations along the lines of the Euro-Atlantic Partnership and Cooperation Council and open NATO’s liaison office in Japan. To create the Baltic-Japan security and defence 1.5 Track dialogue forum. To develop ties between the defence intelligence services of Estonia and Japan in order to better understand the threats posed by Russia and China. To facilitate networking in the fields of concept development, capability planning, doctrine, and military education to address the challenges of multi-domain operations. To explore possibilities for closer defence industrial cooperation and technology sharing between Estonia and Japan in cyber security, artificial intelligence, sensorics, robotics, and electronic warfare. To engage Estonia’s knowledge and experience when adopting NATO’s standards and practices in Japan’s future capability development in pursuit of interoperability. To hold joint exercises in integrated air and missile defence, coastal defence, critical undersea infrastructure protection, etc. As Japan seeks to forge closer defence relations with Europe and European nations and enhance their defence ties with the democracies in the Indo-Pacific area, the need to understand better how cooperation between Estonia and Japan contributes to the emerging Euro-Pacific deterrence agenda will persist.
Topic:
Security, Defense Policy, NATO, European Union, Cybersecurity, Deterrence, and Resilience
Political Geography:
Japan, China, Europe, Ukraine, Taiwan, Asia, and Estonia

3. Europe’s Indo-Pacific Tilt: Estonian and Japanese Interests

Author:
Frank Jüris, Steven Blockmans, Kazuto Suzuki, Sanshiro Hosaka, and Maret Nukke
Publication Date:
01-2023
Content Type:
Special Report
Institution:
International Centre for Defence and Security - ICDS
Abstract:
Reshaped by the new great power competition, the international order has been undergoing revolutionary transformations. Revanchist Russia has unleashed a barbarian war against a sovereign European nation, while increasingly militarised and contentious China looms as a not-so-insidious threat in the Indo-Pacific. In response to these shifting dynamics and mounting geopolitical tensions, Europe is now awakening to the new reality and paying greater attention to the far-away region. At first glance, Estonia and Japan may seem like odd partners, yet they share vital commonalities and common interests impossible to ignore. Amidst Russia’s ongoing brutal invasion of Ukraine and China’s territorial claims over Taiwan, Japan’s strong advocacy in the Indo-Pacific region confirms how essential unity, consensus, and solidarity are for tackling global challenges in an environment of limited resources. This report brings together foreign and security policy experts to improve our understanding of each other’s security concerns — be it threats in cyber and information space, ruptures in trade, energy, and food, or authoritarian neighbours — by taking a step closer to a shared threat perception. Acknowledging unprecedented challenges to global security and rules-based order that democracy and democracies are confronted with from East to West, this report critically examines whether the European Union’s regional strategy maximises and realises the union’s full potential in the Indo-Pacific, which will test its actorness and agency and determine the role for the decades — if not centuries — to come. As the long-distance race for technological hegemony between the U.S. and China — of which Japan and Estonia are by far neither neutral nor casual observers — tightens, the report highlights national policies and capabilities needed to stay competitive, as well as to reduce known and potential vulnerabilities, from the perspective of economic security. China’s dramatic rise — as not only an economic but also a military superpower — entails an assertive and oftentimes assailing foreign policy that is felt both in Europe and the Indo-Pacific alike. The authoritarian regime in Beijing cleverly exploits the vacuum of power wherever it finds any. Cautioning against repeating the old mistakes of China-centrism, the report advocates for fostering multifaced cooperation with Japan in the framework of EU-Japan and Estonia-Japan relations. Thus, the report recommends that the EU as a whole and its individual member states should continue building on the positive momentum generated by the Indo-Pacific strategies and modify their approach to incorporate like-minded partners. From freedom of information to information- and cybersecurity, the report reminds us that leadership matters. It explains the changing tides in the Japanese mainstream public opinions that have already washed away the decades of harmful Russia-centrism from media, academia, and corridors of power and thus resulted in a society successfully resisting malign foreign disinformation campaigns. Estonia and Japan should facilitate digital transformation beyond their national borders, promote economic security, and exert geopolitical power through domestically produced sophisticated technology. The report also probes Sino-Russian relations from the perspective of Chinese strategic interests in its own neighbourhood. Able to contain the West by redirecting its focus and resources towards the war in Ukraine, Russia creates additional operation space for China in the Taiwan Strait. With the war raging In Europe, it should be clear that appeasing an aggressor with concessions and seemingly clever compromises only emboldens the latter, making it even more contentious in both territorial claims and bellicose actions. To prevent a conflict from breaking out in the Taiwan Strait, the EU should be building up allied immunity by counterbalancing China in the Indo-Pacific and proactively defending the rules-based world order.
Topic:
Defense Policy, European Union, Cybersecurity, Belt and Road Initiative (BRI), ASEAN, and Economic Security
Political Geography:
Russia, Japan, China, Europe, Ukraine, Taiwan, Asia, Estonia, and Indo-Pacific

4. Naval Incident Management in Europe, East Asia and South East Asia

Author:
Ian Anthony, Fei Su, and Lora Saalman
Publication Date:
03-2023
Content Type:
Commentary and Analysis
Institution:
Stockholm International Peace Research Institute
Abstract:
Unprecedented global turbulence in 2022 has demonstrated the need to pay increased attention to naval operations. Enhanced military capability allows naval power projection far beyond home waters. New threats and challenges are emerging from technological advances and new applications, not least the vulnerability of warships and naval facilities to cyber intrusions and cyberattacks. As states implement the programmes they need to protect and promote their interests at sea, there is also likely to be an increase in the number of close tracking incidents. How effective current risk reduction mechanisms will be at dealing with incidents at sea is unclear. This Insights Paper provides a preliminary assessment of the existing mechanisms and suggests areas for further improvement.
Topic:
Security, Science and Technology, Cybersecurity, Navy, Crisis Management, and Military
Political Geography:
Europe, East Asia, Asia, and Southeast Asia

5. Cyber Crossover and Its Escalatory Risks for Europe

Author:
Lora Saalman, Fei Su, and Larisa Saveleva Dovgal
Publication Date:
09-2023
Content Type:
Commentary and Analysis
Institution:
Stockholm International Peace Research Institute
Abstract:
The crossover between cybercrime and cyberwarfare has intensified in recent years, particularly against the backdrop of the ongoing conflict in Ukraine and mounting tensions between China, Russia and the United States. This paper delves into specific cyber incidents that employ cybercrime tactics with cyberwarfare objectives, allegedly involving Chinese, Russian or US actors. It examines responses within and among the private sector, the public sector and international forums. Although not directly involved in all of the cases, the European Union (EU) was impacted in a variety of ways, including as a result of spillover effects and intentional targeting. Drawing on an examination of cyber incidents, this paper highlights how emerging trends in actors, means and responses present escalatory risks for the EU and emphasizes the pressing need to bolster cybersecurity measures.
Topic:
European Union, Cybersecurity, Conflict, Risk, and Russia-Ukraine War
Political Geography:
Russia, China, Europe, Asia, and United States of America

6. Digitalisation: An enabler for the clean energy transition

Author:
Simon Dekeyrel and Melanie Fessler
Publication Date:
01-2023
Content Type:
Working Paper
Institution:
European Policy Centre (EPC)
Abstract:
Russia’s invasion of Ukraine and the resulting energy crisis are a painful reminder that Europe must reduce its dependence on fossil fuels. To build a sustainable, secure and affordable energy future, the coming years will require a massive scale-up of renewable energy across the EU and a tremendous effort by European businesses and households to cut their energy consumption. To wrap up the "Digitalisation for a Clean Energy Transition" project undertaken by the EPC and the Vodafone Institute for Society and Communications, this Discussion Paper examines how digitalisation can act as a catalyst for the clean energy transition in Europe. The study considers the regulatory framework necessary to coordinate and promote synergies between energy and digital policies and support the twin green and digital transformation of the European energy system. To fully unlock the potential of digitalisation in the transition towards smart and sustainable energy systems, the EU and its member states need to: Accelerate work on a common European energy data space, characterised by interoperable data standards, adequate incentives for data sharing, data protection and privacy safeguards for consumers. Ensure that citizens possess the necessary digital skills and information to reap the full benefits of the twin transition in terms of consumer empowerment and access to affordable and clean energy. Put in place the necessary safeguards regarding the cybersecurity of energy networks to ensure that the digital transformation does not jeopardise the resilience of EU energy systems. Use financial tools to accelerate the deployment of digital solutions in the energy sector and equip existing networks with the necessary digital infrastructure. For digitalisation to deliver, it needs to be steered in the right direction. For this, we need an adequate policy and financing framework to make sure that the twin transition not only empowers people and businesses to play an active role in accelerating the transition to clean energy sources but also contributes to greening the digital and ICT sector.
Topic:
Cybersecurity, Fossil Fuels, Digitalization, Energy, Russia-Ukraine War, and Energy Transition
Political Geography:
Europe

7. A quantum cybersecurity agenda for Europe

Author:
Andrea García Rodríguez
Publication Date:
07-2023
Content Type:
Working Paper
Institution:
European Policy Centre (EPC)
Abstract:
Cybersecurity plays an important role in Europe’s economic security. However, advances in quantum computing create a new set of challenges that compromise the level of security of everything happening online. Actors like the United States and some — but not all — EU member states are already taking action to counter current and emerging threats. Yet, European coordination will be necessary to ensure a harmonised and effective response. This Discussion Paper provides recommendations on how the EU could enhance its efforts to navigate cybersecurity risks. These include: 1. Establishing an EU Coordinated Action Plan on the quantum transition. 2. Establishing a new expert group within the European Union Agency for Cybersecurity with seconded national experts to exchange good practices and identify obstacles to the transition to post-quantum encryption. 3. Assisting in setting priorities for the transition to post-quantum encryption and pushing for cryptographic agility to respond to emerging vulnerabilities. 4. Facilitating political coordination between the European Commission, member states, national security agencies and ENISA to determine technological priorities and identify use cases for quantum-safe technologies. 5. Facilitating technical coordination at the EU level to address research gaps in quantum-safe technologies. 6. Exploring the use of sandboxes to accelerate the development of near-term applications of quantum information technologies.
Topic:
European Union, Cybersecurity, and Economic Security
Political Geography:
Europe

8. The Ethical Character of Russia's Offensive Cyber Operations in Ukraine: Testing the Principle of Double Effect

Author:
Ian A. Clark
Publication Date:
09-2023
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
Cyber weapons have the potential to achieve strategic military aims in a manner that reduces physical harm, but they can also be used to enhance and expand the lethality of conventional weapons and tactics. When designed to collect private data, cyber weapons can facilitate assassination, kidnapping, torture, and other severe violations of human rights and international law. Russia’s invasion of Ukraine is not the first time that cyber weapons have been deployed for military purposes; however, it is likely the first example of cyber warfare tactics being deployed in a sustained and strategically significant manner in the context of conventional war. To assess the ethical character of Russia’s offensive cyber operations against Ukraine, it is helpful to leverage the principle of double effect, which enables a more precise evaluation of the relationship between the intentions that motivate an act and the effects of the act once it has been taken. Drawing on this principle, this article argues that Russia’s offensive cyber operations in Ukraine represent an unjust use of force and proposes ways of enhancing the ethical character of cyber warfare in future conflicts.
Topic:
Cybersecurity, Ethics, Russia-Ukraine War, and Just War
Political Geography:
Russia, Europe, and Ukraine

9. The changing face of Russia’s information war against Ukraine and other democratic countries: Lessons and recommendations. Interview with Professor Sinan Aral

Author:
Sinan Aral
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Aral: Pre-2020 strategies of misinformation and disinformation have evolved over the last 5 years but they have not been any less intense. In fact, they have potentially been at least as intense and sometimes more intense. The tactics have changed. Before 2020, the western world was not as cognisant or prepared to deal with Russian dis- and misinformation online. And so, Russian tactics were much more overt. In particular, what they would do was use bots and human trolls and sock pockets to spread mis- and disinformation. And bots were a big part of it.3 I think that now what you see more of is the amplification of real voices because those are harder to take down. So instead of putting a false narrative out there, they would do a search for real people creating the narrative they want to promote and then amplify that narrative through reshares, retweets, likes, and amplifications as best as they can. And when the platforms look at that, they say ‘we can’t take this down because the originator of the post is a real human being that we can verify as real, not a Russian spy etc.’
Topic:
Cybersecurity, Social Media, Disinformation, Information Warfare, and Russia-Ukraine War
Political Geography:
Russia, Europe, and Ukraine