A Framework for the Global Governance of Private Cybersecurity Companies

Private Cybersecurity Companies (PCSCs) provide a wide variety of cybersecurity services to their private and public sector clients. This Policy Brief focuses on PCSCs offering system defence, vulnerability identification, and attribution services. Despite the extent of their cyber capabilities, there are no international agreements that regulate the activities or monitor the performance of PCSCs. This reveals the requirement for high standards and effective oversight.

This brief framework suggests way forward for the G-20 to combat the digital divide and recommends a plan of action.