Securing Our Future: A Cybersecurity Manifesto for the NATO Summit

A Cybersecurity Wish List Ahead of NATO Summit

Introduction

Tomorrow’s NATO Summit in Vilnius, Lithuania presents an opportunity for NATO to address its cybersecurity strategies and capabilities. With the ongoing Russia/Ukraine conflict, NATO has seen an increased focus on strengthening and enlarging the military alliance. This unprecedented unity should extend to the cyber domain, where NATO can play a greater role in securing the critical infrastructures of its member countries. However, there are challenges to achieving a fully unified cybersecurity program within NATO, including differing levels of cyber sophistication among member countries and political considerations. In order to effectively enhance cybersecurity, experts suggest focusing on local defense, improving the capabilities of security defenders, and establishing a NATO Cyber Command.

The challenges of a unified NATO Cybersecurity program

One of the primary challenges in establishing a unified NATO Cybersecurity program is defining its purpose. NATO is primarily a military alliance focused on kinetic defense, and there is no easy correlation between kinetic warfare and cyberwarfare. Additionally, the physical size and cyber sophistication of NATO members vary greatly, leading to concerns about misdirection and cyberespionage among member countries. The political dynamics within NATO also make it unrealistic to expect full sharing of cyber capabilities among all members.

Refocusing and improving capabilities

To overcome these challenges, cybersecurity expert Ross Brewer suggests refocusing on the local battle against cybercriminals and state actors. Rather than solely focusing on the external threats, NATO Cybersecurity should prioritize helping entities, especially those in national critical infrastructures, at the local level. Brewer also emphasizes the need to improve the capabilities of security defenders, suggesting that NATO should adopt the approach used by the US Cyber Command, which includes regular use of cyber range stress testing.

Establishing a NATO Cyber Command

Brewer suggests that a NATO Cyber Command could help secure the critical industries of member states in the same way that the US Cyber Command does for the US. This would involve providing assistance to NATO member countries in clearing intruders from their networks and imposing the trickle-down security effect upon national infrastructures. A formal NATO Cyber Command would also enhance the deterrent capability of NATO and enable it to respond more effectively to cyber threats. This would involve openly sharing attack information, threats, and partnering with the private sector to build resilient environments against cyber attacks.

Promoting cybersecurity through diplomacy and training

In addition to a NATO Cyber Command, experts propose other measures to enhance cybersecurity within the alliance. One suggestion is to establish a NATO Cyber Ambassador role to advocate for cybersecurity norms and practices on a global stage, negotiate cyber treaties, and de-escalate tensions. Another idea is to promote cyber diplomacy and consider cyber as a deterrence option. In terms of training and education, experts recommend implementing citizen training campaigns to enhance online hygiene and recognizing phishing attempts. They also suggest investing in advanced technologies like artificial intelligence and machine learning to predict and detect cyber threats in real-time.

Prioritizing critical infrastructure security and international cooperation

The security of critical industries should be a priority for NATO. Experts suggest implementing national cybersecurity scorecards to evaluate each country’s efforts and identify weaknesses. They also recommend stress testing to assess the alliance’s ability to respond and recover from worst-case scenarios. Increased threat and intelligence sharing can be promoted through an international cybersecurity exchange program, fostering stronger relationships and promoting a unified approach to cyber defense. Finally, an innovation challenge and investment in advanced technologies like AI and ML can drive innovation and attract fresh talent to the field.

Conclusion

In conclusion, the NATO Summit presents an opportunity for NATO to strengthen its cybersecurity capabilities and enhance cooperation among member countries. While there are challenges to establishing a fully unified NATO Cybersecurity program, focusing on local defense, improving the capabilities of security defenders, and establishing a NATO Cyber Command can help address these challenges. Prioritizing the security of critical industries, promoting international cooperation, and investing in training and advanced technologies are crucial aspects of a comprehensive cybersecurity strategy for NATO. By taking these steps, NATO can effectively address the cyber threats facing its member countries and ensure the security of critical infrastructures.