The Cyber Statecraft Initiative works at the nexus of geopolitics, technology, and security to craft strategies to help shape the conduct of statecraft and to better inform and secure users. This work extends through the competition of state and non-state actors, the security of the internet and computing systems, the safety of operational technology and physical systems, and the communities of cyberspace. The Initiative convenes a diverse network of passionate and knowledgeable contributors, bridging the gap among technical, policy, and user communities.

Our work

The Atlantic Council Technology Programs comprises five existing efforts—the Digital Forensic Research Lab (DFRLab), the GeoTech Center, the Cyber Statecraft Initiative, the Democracy + Tech Initiative, and the Capacity Building Initiative. These operations work together to address the geopolitical implications of technology and provide policymakers and global stakeholders necessary research, insights, and convenings to address challenges around global technology and ensure its responsible advancement.

Team

Fellows

Publications

Testimony

May 25, 2021

Herr testifies to the Investigations and Oversight and Research and Technology subcommittees on improving the cybersecurity of software supply chains

On May 25, 2021, Trey Herr, Director of the Cyber Statecraft Initiative within the Scowcroft Center for Strategy and Security, testified to the House Science, Space, and Technology subcommittees on Investigations and Oversight and Research and Technology on improving the cybersecurity of software supply chains following SolarWinds.

Cybersecurity

In the News

May 24, 2021

Herr, Handler, and Schroeder on the Cipher Brief’s State Secrets podcast

By Atlantic Council

Trey Herr, Simon Handler, and Emma Schroeder join the Cipher Brief's State Secrets podcast to discuss their recent report on the Sunburst cyber-espionage campaign.

Cybersecurity Intelligence

In the News

May 24, 2021

Herr in Foreign Policy: Russia’s hacking success shows how vulnerable the cloud is

Russia’s Sunburst cyberespionage campaign, discovered late last year, impacted more than 100 large companies and U.S. federal agencies, including the Treasury, Energy, Justice, and Homeland Security departments. A crucial part of the Russians’ success was their ability to move through these organizations by compromising cloud and local network identity systems to then access cloud accounts and pilfer emails […]

Cybersecurity

Markup

May 20, 2021

MARKUP: Our experts annotate Biden’s new executive order on cybersecurity

By Cyber Statecraft Initiative

To help unpack President Joe Biden's new executive order on cybersecurity, Atlantic Council experts and friends mark up the order with their thoughts on what it means for the government and private sector.

Cybersecurity Digital Policy

In the News

May 18, 2021

Handler, Schroeder, and Herr in War on the Rocks: cyber security as counter terrorism seeking a better debate

Earlier this month, a senior Justice Department official referred to ransomware as a potential “cyber weapon of mass destruction.” When hackers subsequently disabled the Colonial Pipeline, causing fuel shortages and disruptions along the East Coast, it seemed to validate this warning. But it would be a mistake for the policy establishment to double down on an outdated […]

Cybersecurity

In the News

May 18, 2021

Handler, Schroeder, and Herr in War on the Rocks: Cyber security as counter-terrorism: Seeking a better debate

By Atlantic Council

To improve US cybersecurity, policymakers should draw on relevant strategic lessons from the study of terrorism and counterterrorism.

Cybersecurity Terrorism

In the News

May 17, 2021

Schroeder, Handler, and Herr for the Modern War Institute at West Point: Population-centric cybersecurity: Lessons from counterinsurgency

By Atlantic Council

In developing strategic responses to conflict within and through cyberspace, the United States should learn from past conflicts with similar characteristics. Population-centric counterinsurgency strategies provide a compelling lens.

Cybersecurity Security & Defense

The 5×5

May 13, 2021

The 5×5—How retaliation shapes cyber conflict

By Safa Shahwan Edwards, Simon Handler

Imposing costs—or retaliation—in the physical domain has been studied, but what does retaliation look like in cyberspace and how is it different than retaliation in the physical domain?

Cybersecurity Security & Defense

In the News

May 13, 2021

Herr in Lawfare: everything you need to know about the new executive order on cybersecurity

Yesterday evening, the Biden administration released its much-anticipated “Executive Order on Improving the Nation’s Cybersecurity.”  It is tempting to yawn; every administration in recent memory has done something of this kind, after all, and not always to significant effect.  But this executive order deserves your attention. It contains concrete measures tailored to respond to lessons […]

Cybersecurity

New Atlanticist

May 11, 2021

How operational collaboration can improve US cyber capability and response

By Gregory Rattray

Dealing with cyber challenges to US national security will take operational collaboration that unites all levels of the government and the private sector. These efforts can maximize the strategic impact of public- and private-sector capabilities, speed up defenders’ response times, and provide organizations with advanced warning of potential attacks and complex threats to resilience.

Cybersecurity Technology & Innovation

The Atlantic Council’s Cyber Statecraft Initiative, part of the Atlantic Council Technology Programs, works at the nexus of geopolitics and cybersecurity to craft strategies to help shape the conduct of statecraft and to better inform and secure users of technology.

Licensing CSI Graphics

All original graphics created by the Cyber Statecraft Initiative (CSI) are available for re-use under the following conditions:

  • Written permission must be granted by CSI.
  • Graphics may be copied and distributed in any medium or format in unadapted form only, for noncommerical purposes, and only so long as attribution is given.1Language based on Creative Commons CC BY-NC-ND 4.0
  • The attribution must reference the Cyber Statecraft Initiative and include a link to the content.
  • CSI cannot grant permission for the use of images or graphics licensed from third parties.