Cybersecurity Strategy Research Articles

Strategic integration of cyber security in business intelligence systems for data protection and competitive advantage

In the current world, business intelligence systems play a crucial role in guiding organizations on the best strategies to adopt depending on the analytical information and results obtained (Ahmad et al., 2020). Nonetheless, they are being used frequently and, hence, are vulnerable to ransom attacks, requiring appropriate security measures. This study examines the opportunities for BI solution providers to implement cybersecurity, mitigate risks, and gain competitive advantage. The study adopts a mixed-methods approach to the research involving a literature review study, self-complete questionnaires, interviews, and case studies among a variable of industry professionals. The observation in this research process shows that incorporating enhanced encryption methods, two-factor verification, monitoring, and security culture advancements leads to increased data security levels. Furthermore, apart from defending an organization from cyber-threats, properly implementing cyber security in BI systems ensures that an organization acquires better customer trust, compliance with regulations, and a competitive edge in the market. This paper outlines vital tactics and best practices businesses can apply to enhance, design, and implement robust cybersecurity strategies for organizational benefit. This research aims at the following question; How can cybersecurity be integrated in Business Intelligence (BI) systems considering the facts that businesses are adopting data-driven strategies in the current century? Since more organizations opt for BI systems to collect pertinent information and generate strategic decisions, the systems named remain vulnerable to grabs and threats. Similarly, the research on the role of cyber security is a prime example to show how it need not to be a risk factor but in fact could be a key strength.

Cyber Diplomacy during the Biden Administration and Future Prospects

The Biden administration has placed a high priority on cybersecurity and cyber diplomacy during its tenure. This paper delves deeply into the Biden administration's various efforts in the realm of cyber diplomacy, aiming to forge cyber alliances guided by cybersecurity strategy and the concept of small multilateralism. The Biden administration seeks to leverage cyber diplomacy to repair relationships with traditional allies while also strengthening cooperation with emerging market countries, thereby maintaining and enhancing the United States' leadership in global cyber policy. The paper also analyzes the main challenges faced by the Biden administration, including rapidly advancing technology, domestic and international political factors, and competition with global adversaries. Finally, the paper evaluates the current effectiveness of the Biden administration's cyber diplomacy, noting some achievements while arguing that the U.S. cyber diplomacy strategy will need further adjustments and optimizations to address the continuously changing global political and economic landscape.

Digital Sentinels and Antagonists: The Dual Nature of Chatbots in Cybersecurity

Advancements in artificial intelligence, machine learning, and natural language processing have culminated in sophisticated technologies such as transformer models, generative AI models, and chatbots. Chatbots are sophisticated software applications created to simulate conversation with human users. Chatbots have surged in popularity owing to their versatility and user-friendly nature, which have made them indispensable across a wide range of tasks. This article explores the dual nature of chatbots in the realm of cybersecurity and highlights their roles as both defensive tools and offensive tools. On the one hand, chatbots enhance organizational cyber defenses by providing real-time threat responses and fortifying existing security measures. On the other hand, adversaries exploit chatbots to perform advanced cyberattacks, since chatbots have lowered the technical barrier to generate phishing, malware, and other cyberthreats. Despite the implementation of censorship systems, malicious actors find ways to bypass these safeguards. Thus, this paper first provides an overview of the historical development of chatbots and large language models (LLMs), including their functionality, applications, and societal effects. Next, we explore the dualistic applications of chatbots in cybersecurity by surveying the most representative works on both attacks involving chatbots and chatbots’ defensive uses. We also present experimental analyses to illustrate and evaluate different offensive applications of chatbots. Finally, open issues and challenges regarding the duality of chatbots are highlighted and potential future research directions are discussed to promote responsible usage and enhance both offensive and defensive cybersecurity strategies.

The Major Challenges Facing the Development of African Countries, and Algeria in Particular, in the Face of Cybercrime

The rapid development of information and communication technologies is closely related to the exponential growth in data volumes. At the same time, the development of enterprise strategies coupled with the digital economy has led to changes in business models and infrastructure solutions. The emergence of innovative industries that extensively use the internet has presented significant challenges to the security of systems and sensitive data, particularly in the field of cybercrime. In order to address the growing issue of cybercrime, African nations, among which Algeria is the largest country, need to build a series of digital barriers in the form of legislation, multilateral agreements, and the development of technical capacity in this area, such as the creation of cybersecurity centers. The implementation of an effective cybersecurity strategy is strongly required on a national, regional, and continental scale. According to the last report of the Global Cybersecurity Index 2020, Mauritius is ranked as the most secure country in Africa in terms of cybersecurity, followed by South Africa in the second rank. A successful economy inherently involves a digital economy and a bold strategy to counter all the “nuisance” of cybercrimes. Algeria, despite its relatively low ranking in the last report of the Global Cybersecurity Index, has made significant progress when compared to its neighbors. With its excellent internet connectivity and a young and dynamic population, Algeria’s positive economic indicators are certain to improve even further with the desired membership it seeks in the BRICS organization. Given these considerations, it follows that South Africa as well as Algeria possess the potential to serve as locomotives for the development of the whole of Africa.

A data-driven multi-perspective approach to cybersecurity knowledge discovery through topic modelling

Cybersecurity is crucial for protecting the privacy of digital systems, maintaining economic stability, and ensuring national security. This study presents a comprehensive approach to cybersecurity knowledge discovery through topic modelling, using a multi-perspective analysis of academic and industry sources. The datasets include 15,751 articles from the Web of Science (WoS) database and 5,831 articles from Security Magazine, spanning from 2011 to 2023. We employed BERTopic for topic modelling, UMAP for dimensionality reduction, and HDBSCAN clustering algorithm for grouping and analysing distinct article clusters to uncover latent topics, enhancing the understanding of the evolving cybersecurity landscape. This study found 12 micro-clusters and three macro-clusters, namely technology, smart city and education, from the WoS database and 12 more micro-clusters and four macro-clusters, including organization, public security, governance, and education, from magazines. This study reveals key cybersecurity research and practice trends, such as the increasing focus on malware, ransomware, and cyber-attack mitigation. Additionally, temporal analysis indicates a significant rise in cybersecurity interest around 2020, followed by a diversification of topics. The results highlight the importance of integrating diverse data sources to capture a holistic view of cybersecurity developments. Future work will aim to refine the clustering algorithms to further improve topic extraction and analysis and expand the datasets to include more diverse sources and perspectives. This approach helps discover current cybersecurity trends and provides a foundation for more targeted and effective cybersecurity strategies.

The Impact of Cybersecurity Strategy on Information System Effectiveness: Conceptual Paper

The Impact of Cybersecurity Strategy on Information System Effectiveness: Conceptual Paper

Methodology of Quantitative Assessment of Network Cyber Threats Using a Risk-Based Approach

The methodology of a quantitative assessment of organ- isation’s network cyber threats was developed in order to quanti- tatively assess and compare the cybersecurity threat landscape in conditions of limited data while applying the risk-oriented approach. It can be used either for assessing the level of network cyber threats of a particular organisation (as a quantitative measure of the criti- cality of cyber threats that are detected within the organisation’s network) or for comparing the level of network cyber threats of several organisations during the same or different time periods, giving grounds for supporting the process of making manage- rial decisions regarding the organisation’s cybersecurity strategy. The proposed scheme of the algorithm can be used to automate the calculation process. The assessment of network cyber threats that are considered in the article is not a full-fledged measure of the cyber risk because the methodology was developed consider- ing the common circumstances of the deficiency of the risk context data. Nevertheless, the results of the methodology implementation partially reflect the overall level of the organisation’s cyber risk and are expected to be used in the case when the full-featured proper cyber threats assessment can’t be organised for some reason.

Determining the Efficacy of Machine Learning Strategies in Quelling Cyber Security Threats: Evidence from Selected Literatures

The alarming security threats in the internet world continually raise critical concerns among individuals, organizations and governments alike. The sophistication of cyber-attacks makes it imperative for a paradigm shift from traditional approaches and measures for quelling the attacks to modern sophisticated, digital and strategic ones, such as those involving machine learning and other technologies of artificial intelligence (AI). This study is aimed at examining machine learning (ML) strategies for effective cyber security. ML involves using algorithms and statistical models to enable computers learn from and make decisions or predictions based on data. The study relied on secondary data, which were subjected to a systematic review. The results of its thematic and qualitative analyses prove that majority of the literatures allude to the fact that the maximal performance abilities and tactics of the ML constitute its strategies for quelling cyber security. These include its: early detection of threats that are tackled before they cause damages; ability to analyze huge quantity of data quickly and accurately; and processing of datasets in real-time. The study argues that the noted abilities and tactics constitute ML strategies for quelling cyber security, regardless of its challenges like data quality, security vulnerabilities and possible incidences of bias. The study concludes that ML can indeed be used to detect and respond to threats in real-time, ascertain patterns of malicious behavior, and improve on internet security, which thereby prove it to be a viable tool for quelling cyber security.

Securing Networks in the Digital Age: A Review of Intrusion Detection and Prevention Strategies

In today's interconnected world, billions of individuals rely on the internet for various activities, from communication and commerce to entertainment and education. However, this widespread connectivity also brings about an increased risk of cyber threats and malicious activities. In response to these challenges, intrusion detection technology has emerged as a vital component of modern cybersecurity strategies. This paper presents a comprehensive literature survey focusing on Internal Intrusion Detection Systems (IIDS) and traditional Intrusion Detection Systems (IDS). These systems utilize a diverse array of data mining and forensic techniques algorithms to monitor and analyze system activities in real-time, thereby detecting and preventing potential security breaches. Additionally, the paper explores the integration of data mining methods for cyber analytics, offering valuable insights into the development and enhancement of intrusion detection capabilities. Through a thorough examination of existing research and methodologies, this study aims to provide a deeper understanding of the evolving landscape of intrusion detection and contribute to the advancement of cybersecurity practices in an increasingly digitized world.

NATIONAL SECURITY AND THE TOOLS OF CYBER POWER: A REVIEW ON THE AREAS OF STATE HEGEMONIA

In the post-Cold War era, in terms of international relations, 'cyber security' emerges as a significant security issue for the spheres of state sovereignty beyond the personal sphere. In addition to the harmful effects of cyber threats on the functioning of public institutions and organizations, İt also raises a problem for states, such as managing perception operations by creating a society more open to manipulative influences. In our globalizing world, as the most important actor of the system, the States' dependence on each other has increased, and at the same time, there has been a period in which the fundamental security issues are intertwined for the States. In such a situation where it is not possible for the States to define themselves outside the system, classical realist approaches are insufficient to explain the changing -and increasingly abstracted-security areas. Nation-states must develop more complex skills and prioritize cooperation to deal with these new security threats. In our study, which focuses on the national cyber security perceptions of states, the measures taken by the States in the cyber world on priority issues, such as institutional functioning and survival problems, are analyzed in terms of national security strategies. On the theme of 'new security', the main focus is the necessity for actors to develop new defense capabilities within the framework of the 'quick response and easy adaptation' in the face of increasing and diversifying cyber threats. In our study, which deals with the efforts of digital Nation-states to increase their effectiveness in cyberspace in determining the 21st-century sovereignty areas and the increase in their tendency towards cyber warfare tools, the active/passive defense methods followed by the States in the perspective of cyber security strategies have been evaluated. In this context, it is the most acceptable method for the States to prefer the 'active defense model' in order to avoid cyber attacks against vital institutions such as education and health.

Development of the Country’s Sustainable Cyberspace Strategy to Ensure the Country’s National Security

This article is devoted to the assessment of the country’s sustainable cyberspace strategy by comparing the cyber security strategies of those countries that are economically developed and use advanced information and communication technologies. Based on the components of the National Cyber Security Index, a calculation was made for 10 countries, which made it possible to monitor the effectiveness of their cyber strategies and identify their shortcomings. The calculation is made for the years 2018 and 2021. During this period, no significant critical changes form abnormal indicators, but it is possible to reflect a particular trend. Application of the PROMETHEE method (I and II) and the formation of net flows, determination of importance and comparison of alternatives allowed to carry out an in-depth analysis of various aspects of cyber security, such as protection measures, response to cyber threats and general resistance to cyber-attacks. It is determined that Belgium and Lithuania are the most resistant to threats from cyber-attacks and in the fight against money laundering among the countries considered, as they are rapidly developing and implementing new measures. Their indicators increased by 0.1 values in 2021 compared to 2018. According to the calculations, Great Britain is the most conservative in implementing certain strategies, and its indicators remained at the level of 0-0.2 according to various criteria for the years studied. Most countries improve their indicators by a total of 0.2 values, which reflects their development. Ukraine tends to decrease some indicators by 0.1 value; some are at the same level. The regulatory framework’s introduction rate in the cyber security field increases. It shows that Ukraine has many rapidly changing risks, but is trying to achieve flexibility in responding to them. The research findings identify each country’s cybersecurity strengths and weaknesses, as well as potential risks and vulnerabilities. Thanks to this analysis, recommendations are made for developing and implementing effective cyber security strategies, both at the national and international levels. The study contributes to the understanding of the complexity of modern cyber threats. It emphasizes the need for continuous improvement and adaptation of protection measures to ensure the stability and security of financial and information systems in a global digital environment.

Aligning sustainable development goals with cybersecurity strategies: Ensuring a secure and sustainable future

This study explores the critical intersection between cybersecurity and sustainable development, aiming to understand how cybersecurity measures can support the achievement of the Sustainable Development Goals (SDGs). Employing a systematic literature review and content analysis, the research scrutinizes peer-reviewed articles, conference proceedings, and reports from international organizations, focusing on literature published from 2010 to 2024. The inclusion criteria targeted works that directly address the role of cybersecurity in sustainable development, particularly those discussing emerging technologies and their potential to enhance digital security in support of the SDGs. The exclusion criteria filtered out non-peer-reviewed articles, opinion pieces, and studies not explicitly linking cybersecurity with sustainable development efforts. Key findings highlight the indispensable role of cybersecurity in safeguarding digital infrastructure essential for achieving SDGs, emphasizing the transformative potential of innovations such as blockchain technology and artificial intelligence in enhancing cybersecurity measures. The study identifies significant challenges at the intersection of cybersecurity and sustainability, including emerging threats and the need for a global framework to integrate cybersecurity within sustainable development efforts. Strategic recommendations for stakeholders encompass fostering international cooperation, investing in cybersecurity education, and promoting inclusive cybersecurity practices. Finally, the study underscores the necessity of integrating advanced cybersecurity measures with sustainable development initiatives. Enhanced cybersecurity is pivotal for creating a secure, resilient, and sustainable digital future, thereby supporting the global pursuit of the Sustainable Development Goals.

Analyzing defense strategies against cyber risks in the energy sector: Enhancing the security of renewable energy sources

This study investigates the cybersecurity challenges and strategies within the renewable energy sector, emphasizing the need for robust defense mechanisms against escalating cyber risks. Employing a systematic literature review and content analysis, the research scrutinizes peer-reviewed articles, industry reports, and international standards documents published between 2014 and 2024. The methodology focuses on identifying effective cybersecurity measures, innovative approaches, and the role of international cooperation in enhancing the security of renewable energy sources. Key findings reveal that the integration of renewable energy into the power grid introduces unique cybersecurity vulnerabilities, necessitating tailored defense strategies. Technological solutions, particularly artificial intelligence (AI) and machine learning (ML), emerge as promising tools for bridging existing security gaps. Moreover, international cooperation and adherence to global standards are identified as pivotal in bolstering cybersecurity resilience across the sector. The study proposes strategic recommendations for industry stakeholders, including the prioritization of comprehensive cybersecurity strategies, investment in advanced technologies, and fostering a culture of cybersecurity awareness. It also highlights the importance of developing robust cybersecurity frameworks through policy interventions and public-private partnerships. Finally, enhancing the cybersecurity of renewable energy sources requires a multifaceted approach that integrates innovative technologies, human factors, policy interventions, and international cooperation. Future research should explore the potential of emerging technologies and investigate the human and policy dimensions influencing cybersecurity in the renewable energy sector.

La población como objetivo estratégico de las acciones cibernéticas: Desafíos para la defensa y seguridad multidimensional presentes (o no) en las Políticas y Estrategias Nacionales de Seguridad Cibernética

This article explores the contemporary context of cyberspace, highlighting the increasing importance of cybersecurity. It emphasizes the need for effective defenses to protect information and underscores cyber hygiene as a possible line of defense through user awareness and education and its implications. The text discusses the persistence of the culture of transgression, especially in Latin America, regarding this concept and examines the role of cybersecurity education in promoting national resilience.The importance of protecting the population against psychological influences resulting from cyber-attacks is also addressed, advocating that the revision of National Cybersecurity Strategies should include the population as a "critical infrastructure". People-centered public policies are essential to anticipate and mitigate the adverse effects of such cyber threats on the population, aiming to prevent it from becoming an effective and efficient weapon that demands its security and defense.

Mathematical models for determining the optimum cyber security strategy of intelligent computer networks of railway electrical supply distances

A study of the problem of the security of information resources of intelligent computer networks for power supply management in railway power generation was conducted. The logical structure of an intelligent computer network is presented, reflecting the topological characteristics of the power supply distance, in the form of a graph. A conceptual approach to the organization of an optimal cyber security strategy is proposed. On the based of Pukhov's differential transformations, differential mathematical models are proposed for determining, in analytical form, the state probabilities of graph nodes. Based on the minimax principle, methods have been developed to determine the optimal cyber security strategy, which allows to achieve the specified security indicators. A criterion for ensuring information security is formulated, which allows determining the state of cyber security of each graph node and the probability of this node being in this state.

Evolving Threats, Emerging Laws: Poland's 2023 Answer to the Smishing Challenge

In the face of rising cybersecurity threats like 'smishing'—SMS-based phishing attacks—this article examines how legislative efforts can effectively address these challenges. This article provides a comprehensive analysis of cybersecurity challenges, focusing on the still growing phenomenon of 'smishing', within the legislative context. In particular, it explores the legal landscape of cybercrime through the lens of Poland's recently enacted Act on Combating Abuses in Electronic Communication, as well as the European Union's Cybersecurity Strategy for the Digital Decade. The first one serves as a significant case study for examining legislative efforts aimed at mitigating cybersecurity risks in the field of electronic communications. The article describes the multi-layered, collaborative business-state approach of the Polish law, which can provide a solid framework for addressing current and future cyber security threats. The act stands as a promising tool for fortifying national cybersecurity infrastructure and could serve as a useful example for other jurisdictions grappling with similar issues. The law also engages citizens actively in its cybersecurity initiatives, promoting collective responsibility. In the broader European Union context, while the Polish Act undergoes scrutiny, this analysis also seeks to explore its alignment with the objectives outlined in the 2020′s European Union's Cybersecurity Strategy for the Digital Decade. This examination aims to evaluate the extent to which the Polish legislative framework resonates with the overarching goals set forth by the European Union, thereby contributing to a deeper understanding of the synergy between national initiatives and the broader European cybersecurity strategy context.

Identifying Information Technology (IT) and Cybersecurity Executives’ Competencies to Support Comprehensive Cybersecurity Programs

Information Technology (IT) and cybersecurity executives play a pivotal role in shaping the cybersecurity posture of an organization. Their ability to make informed decisions, allocate resources, and communicate effectively with cybersecurity professionals is paramount. Consequently, these executives must acquire the necessary competencies that encompass cybersecurity risk management, legal and regulatory compliance, and strategic planning combined with foundational business and technical competencies. An interdisciplinary approach bridging the gap between business, technical skills and strategic decision-making is crucial to navigate the ever-evolving and complex cybersecurity challenges facing organizations today. Failure to do so may result in catastrophic consequences for both individual enterprises and society. Further, the growing frequency and sophistication of cyber threats pose significant risks to organizations and individuals alike. To effectively counter these threats, it is imperative to not only develop cybersecurity talent but also to equip IT and cybersecurity executives with essential competencies in this domain. Equally important, is to identify the specific competencies and develop an approach to train or teach them. According to Burrell, Aridi, & Nobles (2018) there is an extremely urgent need of leadership development for cybersecurity and information technology professionals to prepare these professionals with the foundational skills to excel in leadership, management, and directing an enterprise-level program. This paper underscores the critical need for a comprehensive understanding of both Information Technology (IT) and cybersecurity executive competencies and cybersecurity executive development. Integrating these two aspects is critical to improve an organization’s cybersecurity posture and ensure alignment between organizational objectives and cybersecurity strategies. The two must work in tandem to create a robust and resilient cybersecurity infrastructure. This paper provides an analysis of the current literature regarding IT/Cybersecurity roles and responsibilities, leadership competencies, and technical competencies of IT/Cybersecurity executives to identify the gaps in existing research. The authors propose a survey instrument to conduct a quantitative analysis to identify executives’ beliefs as to how important it is to possess each administrative competency. The survey is part of a future research plan to identify and evaluate administrative and technical competencies of IT/Cybersecurity executive leaders.

Educating Cybersecurity Experts: Analysis of Cybersecurity Education in Finnish Universities

Cybersecurity is no longer just a technical discipline but a strategic concept. Nowadays, cybersecurity has become an essential part of national security strategies. The European Union and European countries have established cybersecurity strategies to strengthen European and national resilience against cyber threats and ensure that citizens and businesses can take full advantage of reliable services and digital tools. A wide range of actors in society, from both government and non-government sectors, are already involved in cybersecurity work. However, there is a constant need to increase the workforce of cybersecurity specialists to manage cybersecurity risks. Finland's cybersecurity strategy emphasizes the importance of developing cybersecurity education to address the cybersecurity risks the country faces. For the nation to achieve cyber self-sufficiency, the pool of cybersecurity specialists should include experts in every knowledge area relevant to various aspects of cybersecurity. Universities have a role in training cybersecurity specialists through their education programs. Consequently, universities should offer comprehensive education encompassing all cybersecurity knowledge areas. This paper aims to overview the state of cybersecurity education in Finland's universities by focusing on cybersecurity education content. By analysing the content of the universities' cybersecurity education, the aim was to understand how current education in Finland meets the cybersecurity knowledge areas of the European Cybersecurity Taxonomy. In spring 2023, data on cybersecurity degree programs and courses were collected through surveys from nine Finnish universities providing cybersecurity education. As a result, we gained an understanding of the capability of Finnish university-level cybersecurity education to offer specialists in different domain areas of cybersecurity.

Small Steps, Big Security: TAM-Powered Insights of Cybersecurity Adoption Among Small-And-Medium Entrepreneurs in Digital Business

Embracing digital business enhances company resilience, yet small and medium-sized enterprises (SMEs) often lack resources to combat cyber threats, unlike larger enterprises. Sophisticated cyberattacks surpass standard antivirus software, necessitating a shift in cybersecurity strategies. Therefore, this study aimed to investigate the relationship between knowledge, perceived usefulness, perceived ease of use, and the adoption of cybersecurity among small-and-medium entrepreneurs in Perak, Malaysia. Guided by the Technology Acceptance Model (TAM), this ongoing research employed a quantitative approach by distributing questionnaires to 400 digital entrepreneurs in the small and medium-sized business sectors in Perak. The findings revealed that the majority of entrepreneurs possessed a relatively high level of knowledge about cybersecurity. Furthermore, the study identified a strong positive correlation between knowledge and perceived usefulness (correlation coefficient r = 0.639), as well as a moderately positive correlation between knowledge and perceived ease of use (correlation coefficient r = 0.435) among small and medium entrepreneurs in Perak. Consequently, this study contributes to a better understanding of the Technology Acceptance Model (TAM) within the context of perceived usefulness, perceived ease of use, and the adoption of cybersecurity, thereby enriching the existing literature on cybersecurity among small and medium entrepreneurs in the era of digital business.

Navigating the Cyber Front: Belarus' State Control and Emerging Cyber Threats

This paper provides a comprehensive overview of the cyber landscape in Belarus, with a focus on the Belarus government's use of cyber activities from an offensive and defensive context, the emergence of opposition cyber activities, and the broader implications for cybersecurity and legal compliance. In the course of the research, researchers try to assess Belarus as a source of cyber-threats, both domestically and to neighbouring states (especially those supporting Ukraine). The first section of the paper outlines the Belarusian government's engagement in cybercrimes against its citizens, especially under President Lukashenko's regime, highlighting extensive online surveillance, repression, and the escalation of these activities following the 2020 presidential elections. In this political context, Belarus is also examined as a country initiating and/or contributing to Information Warfare activities, which are mainly directed at western countries. The second section of the paper delves into Belarus's cybersecurity legal framework, examining various national strategies and concepts, the absence of a formal cybersecurity strategy, and the focus on 'information security' as part of national security. The third section presents case studies of cyber activities in Belarus, contrasting government-backed hacking efforts with those of opposition groups like the Belarus Cyber Partisans. It explores the Partisans' attacks on state infrastructure and information leaks as a form of protest against the government, and the pro-government hackers' disinformation / information campaigns website defacements, and data breaches, particularly targeting Ukraine. This section highlights the evolving nature of cyber conflict in Belarus, where both government and opposition forces use cyber tools for political ends, reflecting broader geopolitical tensions in the region. This part of the report compares the Belarusian pro-government hacktivist and Cyber Partisans groups, their activities and manifestations within the country (inside), as well as the cyber threats they pose to foreign countries. The article attempts to answer the question of what kind of threat Belarus as a country poses in the context of cybersecurity, hybrid-cyber threats. This country is often included in Russian hybrid-cyber threats strategies, Belarus entities also work with Russian and sometimes Chinese groups in undertaking cyber activities against other countries.