Description:
This session will provide a discussion of the central challenges and opportunities related to states establishing policies and regimes to deter malicious activity in cyberspace. The potential of such deterrence postures relies in large part on cooperation with industry and civil society groups, as well as other governments, to establish credible attributions as well as meaningful response options sufficient to discourage bad actors. Discussion will build on recent developments and scholarship on the topic, including the establishment of the European Union’s cyber deterrence regime and the Joint Statement on Advancing Responsible State Behavior in Cyberspace that was signed by 27 governments this past autumn. Speakers will include representatives from government and international organizations leading these efforts, as well as academics and members of think tanks evaluating what could make such efforts successful. Agenda: • 5 minutes – Opening remarks from moderator setting the stage for the discussion, introducing recent policy initiatives intended to establish deterrence policies and regimes. The moderator will also introduce a guiding question that groups of participants will be tasked with answering following a presentation from the speakers: i) “To establish effective deterrence policies, who should be held accountable for cyberattacks, states, individuals or organizations? Why?” ii) “Which actors/stakeholders will be important to include in establishing effective deterrence policies and regimes?” • 35 minutes – Opening remarks from speakers, sharing their perspectives on current efforts at deterrence in cyberspace, both unilateral and multinational, and what kind of multistakeholder cooperation will be necessary for such efforts to be successful. The moderator will ask pointed follow-up questions to set up the subsequent discussion. • 20 minutes – Moderator directs participants, online and off, to collaboratively discuss in pre-established groups, the two questions introduced at the outset of the session. • 10 minutes – Groups each quickly present their responses to the two focus questions introduced at the outset, as well as the rationale behind their conclusions. • 20 minutes – Speakers are provided an opportunity to respond to the suggestions and answers provided by respective groups to the focus questions, following which participants will be encouraged to ask questions of the speakers. **Note: While they will exist as two distinct sessions, this discussion of deterrence will seek to build directly on another proposed session, Attributing attacks: political, technical & legal dimensions, as deterrence efforts will be so closely linked to effective attribution claims. Attendees will be encouraged to join both sessions, adding further depth and nuance to the discussion.
