In the ever-changing realm of cybersecurity, the concept of combatants has undergone a remarkable transformation. As an Army officer who has experience with both the physical battleground and cyber conflict, I have witnessed this paradigm shift firsthand. Now I want to take you on a journey to explore how combatants are redefined in the cyber world and what it means to you.
Transition in Combatant Rationale:
Only 25 years ago, a traditional combatant was defined as a soldier or terrorist with weapons on foreign soil to force his will on an adversary. The operative term here is boots on the ground. But in the cyber world, a combatant no longer needs to be “in the country of the opponent”, lethal actions can now be done from anywhere in the world. This includes the fact that age is no longer relevant. This means a 75-year-old guy doing deadly cyber work for a government should be considered a combatant.
Way back in 2006, I wrote a paper for the Army Command and General Staff College (CGSC). I took the opportunity to examine this topic further and penned a paper titled "What is a combatant in a cyber world?" exploring combatants in terms of the Geneva Convention. Long story short, I built a scenario where I had a 75-year-old government contractor remotely open the sluice gates of a dam in Iran to flood a military base in the valley below. This means drowning soldiers and civilians and creating havoc as part of a deception operation allowing special forces troops to accomplish a mission without opposition. I argued that if Iranian intelligence were to have discovered the plan in advance and sent a sniper to the US to take out our 75-year-old contractor right before he clicked his mouse, this was legitimate as he was a combatant. It is the outcome, not the method. So we now live under a new paradigm where age and distance no longer matter.
What does combatant evolution mean to you?
As rules have changed, we must adapt. Today, everyone is on the front lines. Every mouse click counts and every individual at your company regardless of age, role, or location is either protecting the company or making it vulnerable. Technology alone can’t do it all for you. The people must be trained. Leadership has to set the right example and the very most senior people must mold the company culture to raise cyber security awareness.
Conclusion:
While this criterion shift poses challenges, it also offers opportunities for growth and development in any industry. As we navigate through the cyber landscape, it’s crucial to enhance your defensive strategies, fortify your systems, and refine your approach to cybersecurity. The CyberSure Group offers senior cyber guidance with a 360-degree defense on a full or part-time basis for companies. Most smaller companies can’t afford a full-time, experienced cyber security professional. But you also can’t afford to NOT have an experienced, senior part-time (aka Fractional) cyber professional in your corner either. So don't hesitate to reach out to us. We're here to help you implement the best security system in your company. If you are a leader, the buck stops here!
Comments