Global cybersecurity norms: Geopolitical needs trump security concerns

• Author:
• Author name

  Quantumrun Foresight
• February 4, 2022

Insight summary

The surge in technological advancements has connected the world like never before, but it has also exposed us to new challenges, notably the increasing threat of cyberattacks. The establishment of global cybersecurity norms could provide a solution, offering enhanced online security. However, the creation and enforcement of these norms present their own difficulties, requiring unprecedented levels of cooperation and transparency among all digital stakeholders.

Global cybersecurity norms context

Rapid advances in various technologies, including artificial intelligence (AI) and cloud computing, have connected populations, businesses, governments and organizations worldwide. These advances have integrated communities and created dependencies between different societal stakeholders. The outbreak of the COVID-19 pandemic only accelerated this digital transformation. However, these developments have brought about new challenges, one being the collective dependence on the integrity of the Internet—a dependence being threatened by cybercriminals. 

Cyberattacks are becoming more numerous and destructive. In 2020, hackers infiltrated malicious code into SolarWinds’s Orion IT monitoring management software, which affected thousands of US government agencies and private companies. It has been estimated that there were 43 significant cyberattacks just in the last quarter of 2020.

A separate significant threat that has many governments, organizations, and businesses worried is the ongoing migration to cloud computing, which brings with it a slew of security challenges and threats. What is needed are global cybersecurity norms. Unfortunately, establishing these norms is extremely difficult, if not virtually impossible. Several attempts have been made to develop these standards, including the 2018 Paris Call and Microsoft’s Cybersecurity Tech Accord.

Disruptive impact 

The creation of these cybersecurity norms could lead to enhanced personal security online. As these rules become universally accepted, individuals may experience a decrease in identity theft, phishing scams, and other forms of cybercrime. This shift could foster a safer digital environment, encouraging more people to engage confidently in online activities, from e-commerce to social networking.

Companies would be required to adhere to these rules, leading to the implementation of more rigorous cybersecurity measures. This development could result in a reduction of corporate cyberattacks, safeguarding sensitive data and intellectual property. Furthermore, it could also lead to the development of new business models that prioritize cybersecurity, potentially creating a competitive advantage for those companies that effectively implement these norms.

Governments may have to balance their national security interests with the need to respect these norms, potentially reducing state-sponsored cyberattacks. This move could lead to a more stable cyberspace, fostering international cooperation and trust. However, the enforcement of these norms remains a challenge, as it requires a level of international cooperation and transparency that is often difficult to achieve in cybersecurity.

Implications of global cybersecurity norms

Wider implications of global cybersecurity norms may include:

• Addressing the vulnerabilities of individuals, businesses, organizations, and governments to cyberattacks by individual hackers, organized crime, terrorist groups, and state security agencies. 


• The buy-in of private companies that retain much of the infrastructure and expertise available within the cybersecurity industry. 


• These norms being built upon existing initiatives like the Paris Call and others, drawing from their strengths and learning from errors to move the world closer to common cybersecurity standards.


• Close co-operation between governments and non-governmental entities, which may entail disclosures on cybersecurity activities by all parties, which participating parties may wish to avoid.


• A more secure online environment, encouraging a larger demographic, including older adults, to participate more actively in the digital world.


• Governments reevaluating their digital strategies, reducing state-sponsored cyberattacks and fostering a more peaceful international digital landscape.

Questions to consider

• Why is it so difficult for the world to reach a binding agreement on global cybersecurity rules?


• How can companies, government, and public interest organizations improve how they cooperate to promote cybersecurity norms within their societies?