Microsoft’s Kaja Ciglic Calls for Broader Responses to State-Backed Cyber Operations
Summary
Microsoft policy executive Kaja Ciglic says state cyber programs are now integrated tools of national power, with automation and AI accelerating activity. She calls for cross-domain consequences, clearer NATO response pathways and standing government-private sectorcoord
Key points
- Ciglic says state cyber programs have become core instruments of national power, integrated with military, economic and diplomatic tools.
- She says automation and AI-enabled tools help state and state-aligned actors scale reconnaissance, vulnerability exploitation and influence operations.
- Ciglic describes North Korean cyber operations as state-directed activity in which revenue generation, including through cryptocurrency theft and illicit IT worker schemes, is a core objective.
- She argues that responses to persistent intrusions should include conditional, reversible economic or diplomatic measures, not only sanctions and indictments.
- She calls for accountability for states that provide safe havens for ransomware activity.
- Ciglic says NATO needs credible thresholds and response pathways for cyber operations, alongside stronger resilience, attribution and coordination.
- She advocates standing coordination between governments and trusted private-sector operators before crises occur.
Article Details
- Topic
- Evolution of nation-state cyber programs and policy responses to AI-enabled cyber operations
People
Countries
North KoreaNorth Korea’s cyber activities function as state-directed revenue generation, blurring espionage, crime, and warfare.UkraineExperience from Ukraine and, more recently, the Middle East demonstrates that cyber operations are now coordinated with kinetic actions, information operations and economic pressure.United StatesIn the US, designations of “state sponsors of cybercrime,” similar to state sponsors of terror, could help draw attention to these safe havens and open up new avenues of accountability, prompting states to exercise
Industries
Critical infrastructureembedded into broader national security strategies and defence planning, particularly around critical infrastructure and societal resilience, not just espionage or disruption.Governmentresponses—conditional economic pressure, state accountability for safe havens, and standing government–private coordination—alongside clearer NATO response pathways to deter persistent stateâbacked cyber