In a year when the breadth, extent, and impact of cyber attacks continues to expand as geopolitical tensions escalate, the creation of norms remains essential to shape behavior in cyberspace and identify which targets are off limits. However, as these latest attacks may demonstrate, absent any coherent cybersecurity strategy and response framework, adversaries will disregard norms as long as they can attack with impunity.
President Putin made three foundational assumptions in launching his war against Ukraine that should have been correct but were not. First, Putin assumed the invasion of Ukraine would be a quick and easy fight. Second, he assumed the world would denounce the invasion but tacitly allow it. Third, Putin assumed the war would deter NATO expansion.
