The Perils of Privatized Cyberwarfare

In an essay for Lawfare, Citizen Lab director Ron Deibert warns that the Trump administration may authorize private firms to undertake offensive cyber operations (OCOs), with major consequences for individuals and the global order.

OCOs are actions taken in cyberspace to disrupt and destroy adversary systems. Unlike espionage, the point is to cause damage rather than gain information. Authorizing private companies to assume responsibility for OCOs would be an unprecedented departure from previous U.S. military convention and international norms.

Deibert argues that this authorization would complicate oversight mechanisms, create counterintelligence risks, empower a corrupt industry, and fuel the cyber arms race, ultimately increasing risks for civilians and states. He proposes that other countries should ally against these developments and devote more resources to civil society watchdogs.