EU cyber diplomacy toolbox
A framework adopted by the European Union in 2017 to respond to cyberattacks through graduated political means, from joint statements to sanctions, which produces the attributions on which cyber war exclusions depend.
The cyber diplomacy toolbox is the European Union's framework for a joint diplomatic response to malicious cyber activities, adopted by the Council in June 2017. It orders a range of measures from the lightest to the heaviest: diplomatic démarches, statements by the High Representative on behalf of the Union, dialogue, restrictive measures. It creates no obligation to attribute, which remains a sovereign decision of each member state, but it organizes how the Union collectively states that an operation is unacceptable and, where appropriate, who is responsible for it. For insurance, the instrument matters at one precise point. Market cyber war exclusions, in their version containing an attribution clause, invite the parties to take account of an official attribution by the government of the state where the affected system is located. A European statement is not in itself such an attribution, but it often accompanies or precedes one, and it sets the date from which a loss treated as criminal can be reread as a state operation.
On May 10, 2022, the European Union issued a statement attributing to Russia the February 24, 2022 attack on the KA-SAT satellite network, which had disabled tens of thousands of terminals in Europe on the very day of the invasion of Ukraine, including remote monitoring of about 5,800 wind turbines in Germany.
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.