Cybersecurity Mission Creep in the US
A growing trend in the United States involves policymakers increasingly framing a wide range of societal problems as cybersecurity issues, a phenomenon described as "cybersecuritization." This reframing transforms diverse policy challenges, including misinformation, social media safety for children, antitrust regulations, allegations of journalist misconduct, and anti-sex trafficking laws, into matters of cybersecurity.
When issues are "cybersecuritized," they are presented not merely as significant but as existential threats amplified by their technological underpinnings. This elevation grants them access to the political and legal frameworks associated with urgency and exceptionalism, potentially leading to concerning governance responses. Framing these problems as security threats imbues them with an apparent authority to override other considerations, thereby oversimplifying complex issues.
This oversimplification inherent in cybersecuritization risks promoting one-dimensional solutions and can lead to the use of argumentative shortcuts, such as invoking First Amendment challenges to dismiss counterarguments. Furthermore, the process often encourages deference to individuals perceived as cybersecurity specialists and their proposed remedies.
The combined effect of cybersecuritization's reductive nature and the deference it prompts can make ultimate governance choices less transparent. This opacity, in turn, has the potential to undermine public trust and erode political legitimacy.
A recent analysis has identified and examined this phenomenon of cybersecuritization, proposing a new framework for its critique. By drawing on examples from both criminal and civil legal domains, the analysis illustrates how pervasive and subtle cybersecuritization has become, suggesting its continued expansion is likely.
Addressing cybersecuritization is considered crucial. The authors warn that failing to confront this trend could result in ceding responsibility for difficult policy decisions to the perceived ultimate authority of cybersecurity. The analysis aims to facilitate a return to more robust and transparent governance processes.
