Science, Technology, and Public Policy

The Kingdom of Saudi Arabia Cyber Readiness at a Glance is the ninth study in a series of country reports assessing national-level preparedness for cyber risks based on the Cyber Readiness Index (CRI) 2.0 methodology. This report provides the most in-depth analysis to date of Saudi Arabia’ current cyber security posture and its efforts to strengthen the country's security and resilience in the wake of significant cyber threats to the nation.

As President Trump increasingly boxes in Tehran, U.S. allies should be worried about the potential for a devastating cyberattack from the Islamic Republic.

A Senior Iranian Islamic Revolutionary Guard Corps (IRGC) official described a war in cyberspace as "more dangerous than a physical war." This statement was likely made in 2012, in response to a wave of publicly reported cyber operations against Iran, including Stuxnet, Duqu, and Flame. Since these operations, Iran has expanded the role of cyber capabilities in its broader national security strategy. Cyber Security Project Director Michael Sulmeyer assesses the role of cyber tools in Iran's broader strategy.

In March, the Justice Department unsealed an indictment against seven Iranians for hacking the U.S. financial sector and a dam in New York. In doing so, it also clarified what information security officials have argued for years: that the vast majority of hacks exploit known vulnerabilities.

Join Dan Meridor, former Chairman of the Foreign Affairs and Defense Committee of the Knesset, former Chairman of the committee which wrote the report on the Israel Defense Doctrine, and former Minister of Intelligence and Atomic Energy, for a three-session study group on Israel's Defense in the Changing Middle East in November.

"In little more than a generation, the Internet has become the substrate of the global economy and governance worldwide. Several billion more human users will be added in the next decade, as will tens of billions of devices, ranging from thermostats to industrial control systems (the 'Internet of Things'). All of this burgeoning interdependence implies vulnerabilities that governments and non-governmental actors can exploit. At the same time, we are only beginning to come to terms with the national-security implications of this. Strategic studies of the cyber domain resemble nuclear strategy in the 1950s: analysts are still not clear about the meaning of offense, defense, deterrence, escalation, norms, and arms control."

On April 2, 2015, the E.U. (speaking on behalf of the P5+1 countries) and Iran announced agreement on “key parameters” for a comprehensive agreement on Iran’s nuclear program. The E.U.-Iran Joint Statement is buttressed by unilateral facts sheets issued by the U.S. and Iran, which provide further details of the framework accord. Negotiators now turn to translating this framework accord into a final comprehensive agreement by June 30, 2015. Members of Congress and their staffs, as well as informed citizens, are now focusing on the Iranian challenge and assessing the framework accord. The Belfer Center for Science and International Affairs at the Harvard Kennedy School has prepared this Policy Brief summarizing key facts, core concepts, and major arguments for and against the current deal aimed at stopping Iran from developing nuclear weapons. The purpose of this Policy Brief is not to advocate support for or opposition to the tentative deal that has been negotiated, but rather to provide an objective, nonpartisan summary to inform Members and others in coming to their own conclusions. The team of experts who prepared this report includes Democrats, Republicans, Independents, and internationals, who have many disagreements among themselves but who agree that this Brief presents the essentials objectively.

While decisionmakers warn about the cyber threat constantly, there is little systematic analysis of the issue from an international security studies perspective. Cyberweapons are expanding the range of possible harm between the concepts of war and peace, and give rise to enormous defense complications and dangers to strategic stability. It is detrimental to the intellectual progress and policy relevance of the security studies field to continue to avoid the cyber revolution's central questions.