Based on an assignment from the Cabinet Office and Department of Defence, the Swedish National Defence College's Center for Asymmetric Threat Studies (CATS) asked RAND Europe to undertake a rapid comparison of states' characterisation of cyber-security threats. This involved investigating three lines of enquiry related to the integration of cyber-security within broader national and transnational defence and security frameworks.

       The project was limited both in size and scope and called primarily for desk research. This document is the final deliverable for this study, encompassing results and analysis from desk research, and insights gleaned from previous research on the issue.

       The first part of the document summarises the findings and provides an overview of the scope and methodology of the research. The second part of the document describes the cyber-security strategies and approaches in ten case studies: Canada, Denmark, Estonia, Finland, France, Germany, Netherlands, Russian Federation, the UK and the USA. At CATS' request we also have profiled initiatives by NATO and the EU. Based on documentary analysis, stakeholder engagement and previous studies, we include a short chapter on potential policy concerns for Sweden going forward, supplementing the case study analysis. The report will be of interest to practitioners and policymakers in cyber-strategy and policy.

       Table of Contents Chapter One

       Research outline

       Chapter Two

       Defining terms

       Chapter Three

       Comparators

       Chapter Four

       Themes from the roundtable

       Chapter Five

       Conclusions

       Chapter Six

       Next steps

       Annex A

       Events of national interest

       Annex B

       Table of national comparators

       Research conducted by RAND Europe

       The research described in this document was prepared for the Center for Asymmetric Threat Studies (CATS), Swedish National Defence College, Stockholm and conducted by RAND Europe.

       This report is part of the RAND Corporation research report series. RAND reports present research findings and objective analysis that address the challenges facing the public and private sectors. All RAND reports undergo rigorous peer review to ensure high standards for research quality and objectivity.

       Permission is given to duplicate this electronic document for personal use only, as long as it is unaltered and complete. Copies may not be duplicated for commercial purposes. Unauthorized posting of RAND PDFs to a non-RAND Web site is prohibited. RAND PDFs are protected under copyright law. For information on reprint and linking permissions, please visit the RAND Permissions page.

       The RAND Corporation is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.