Cyber Warfare Governance

Concept Security and Defense Preferred

Norms, institutions and legal debates governing State hostile operations in cyberspace and their use in armed conflict.

Independent referenceNot an official or legal definition
Sources citedSee the sources at the end of this page
Status Under reviewLast updated 11 October 2026
Spotted an error?Suggest a correction

Definition

In plain language

Cyber warfare governance covers the rules and discussions about how States may use computer attacks against each other and how existing international law applies to such attacks.

Academic definition

There is no dedicated treaty on cyber warfare, and States have instead worked through the UN Groups of Governmental Experts, whose 2013 and 2015 reports affirmed that international law, including the UN Charter, applies to State use of information and communications technologies, and recommended voluntary norms of responsible State behaviour. Non-binding scholarship such as the Tallinn Manual 2.0 (2017) prepared under NATO's Cooperative Cyber Defence Centre of Excellence applies the law on the use of force, State responsibility and humanitarian law to cyber operations. States still disagree on the thresholds for a prohibited use of force or armed attack in cyberspace and on whether sovereignty is a stand-alone rule.

Classification

Term type
Concept
Category
Security and Defense
Subject field
Cyber and Digital Diplomacy
Subfield
International Law and Cyber Operations
Difficulty level
Advanced
Grammatical category
noun phrase

Language variants

Alternative terms
  • governance of cyber conflict
  • cyber conflict regulation
Non-preferred terms
  • not_applicable
Abbreviations
  • not_applicable
Acronyms
  • not_applicable
Native terms
  • not_applicable
Transliteration
not_applicable
Pronunciation
not_applicable

Context

Legal effect: Context-Dependent

Scope

Covers governance of State cyber operations and their use in conflict; ordinary cybercrime, which falls under the Budapest Convention, and data protection are separate.

Legal context

UN Charter Articles 2(4) and 51; the law of State responsibility; humanitarian law rules on distinction and proportionality; GGE reports (A/68/98, 2013; A/70/174, 2015) and the OEWG report of 2021. The Tallinn Manual is academic and not binding.

Diplomatic context

States negotiate in the UN's open-ended working group, issue national positions on how international law applies and attribute attacks through public statements, sometimes combined with sanctions.

Institutional context

Handled in the UN General Assembly First Committee, the Open-ended Working Group, ITU, NATO and regional bodies such as the OSCE.

Historical context

Debate began after the 2007 cyber incidents in Estonia and accelerated with the first GGE report in 2010 and later reports.

Why it matters

The absence of clear rules makes it hard to determine when a cyber operation is an armed attack and what response is lawful, which increases the risk of escalation.

Usage

Register: Academic

Usage note

Use 'cyber operations' for specific acts and 'cyber warfare' only where armed conflict rules are meant.

Example

The group of experts affirmed that international law applies to State conduct in cyberspace.

Example scenario

A State is accused of disabling another State's power grid through malware. The victim State argues the attack was a use of force, while the accused State denies responsibility, and the dispute turns on attribution and on how Article 2(4) applies.

Common misuse

Treating every hostile cyber incident as an act of war; most operations fall below the threshold of use of force.

Not to be confused with

  • Cybercrime
  • Espionage
  • Hybrid warfare
  • Information operations

Sources

  1. Report of the Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security (A/70/174) (2015), United Nations, not_found_in_source. un.org
  2. Official definition. not_found_in_source
  3. Treaty reference. not_applicable
  4. Schmitt (ed.), Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations. not_found_in_source
  5. not_found_in_source. not_found_in_source

Source type: Official Organization. Source reliability: Institutional.

This entry is an independent reference definition, not an official or legally binding text. Where an official definition exists, it is linked above and is authoritative. Read our methodology.

Was this definition helpful?