Report
Norms for State Behaviour in Cyberspace
Norms for State Behaviour in Cyberspace
Cyber Policy & SecurityGlobal2025
UN-led processes have produced a rolling consensus on voluntary norms for responsible state behaviour in cyberspace, but binding commitments remain elusive.
Attribution of state-sponsored cyber operations continues to happen unilaterally and inconsistently, undermining any shared evidentiary standard.
A small group of states has pushed for a binding treaty on critical infrastructure protection, facing resistance from states unwilling to constrain offensive cyber capability.
The report concludes that norm diffusion is outpacing enforcement, leaving a persistent gap between declared principle and state practice.