Partnering for Digital National Security
Cyber vulnerabilities in Ukraine illustrate the need for an inter-agency approach
As the second-largest country by landmass in Europe, Ukraine is blessed with rich, dark soil and vast fields of wheat, earning it the nickname “The Breadbasket of Europe.” This USAID partner country has made great progress on its journey to self-reliance through sweeping government reforms, changes to its financial and health systems, and a growing economy.
But during this progress, bad actors have sought to create chaos through cyber attacks. In 2015, hackers successfully compromised three energy distribution companies in Ukraine, disabling nearly 60 substations and leaving more than 230,000 people without power in western Ukraine and the capital city of Kyiv.
In 2017, malware attacks on Ukraine’s computer systems served as a launchpad to infect companies around the globe — including FedEx, Merck, and Maersk, the world’s largest shipping firm. Several Ukrainian ministries, banks, metro systems, and state-owned industries were affected, as well. It even caused a temporary shutdown of the radiation monitoring system at the site of the Chernobyl Nuclear Power Plant disaster. This attack alone cost an estimated $10 billion.
With the country seemingly heading in a positive direction, how did Ukraine become a battlefield for cyber warfare?
“Pirated software and antiquated hardware certainly contribute to Ukraine’s cyber vulnerabilities, said John Harris, an Environment and Energy Officer at the U.S. Embassy in Ukraine. “But perhaps more important is Ukraine’s geo-political positioning and Russia’s willingness to use cyber attacks to further its own foreign policy priorities. Frankly, Ukraine suffers cyberattacks of such urgency and frequency that even with cutting-edge systems and hardware, it would likely still be vulnerable to cyber intrusions.”
The cyber attacks aim to destabilize Ukraine’s energy networks and sow doubt about Ukraine’s European integration plan, added Harris.
Bridging Cyber Development
As the world depends more on the internet for essential services, so increases the necessity for secure cyber infrastructure. A steady rise in attacks in the fifth domain, or cyberspace, is raising serious concerns about vulnerabilities that could compromise the stability of the global, interconnected economy.
“While Ukraine is on the frontlines of global cyber hostilities, USAID partner countries are becoming more aware of the threat cybersecurity poses to their own development trajectories,” said Harris.
Enter cyber resilience. As successfully demonstrated in the area of food security, USAID excels in fostering resiliency. The cyber sphere is no different. Cyber resilient societies, businesses, and governments are, arguably, the frontlines of U.S. national security. So as USAID and partners work across the spectrum of development, we too must broaden our skillset to meet the growing need in this critical security space. And this is precisely what USAID is doing in Ukraine.
Following the first U.S.-Ukraine Cyber Dialogue in September 2017, USAID provided equipment and training to Ukraine’s Central Elections Commission to strengthen its cybersecurity in advance of the 2019 elections. Through the International Foundation for Election Systems, Ukraine received specialized technical assistance, cyber hygiene training, and nearly $3 million in software and hardware upgrades.
In March, the U.S. and Ukraine met again in Kyiv to discuss, among other topics, national policy development and cyber security. The U.S. announced a $38 million USAID project to improve Ukraine’s cyber preparedness by helping the country address legislative and regulatory gaps in its cybersecurity policy, strengthen its cybersecurity workforce, and build a resilient cybersecurity industry through private-sector collaboration. The U.S. Department of State also announced an additional $8 million in Ukraine cybersecurity assistance on top of the $10 million pledged in 2017.
“Our approach turns Ukraine’s cyber vulnerability on its head,” added Harris, “seeking to turn threat into opportunity, [and] using Ukraine’s frontline status as a catalyst to turn it into a center for cyber innovation.”
A Partnered Solution
In this time of Great Power Competition, adversarial nations like China, Iran, North Korea, and Russia are expanding persistent campaigns in cyberspace that pose serious risk to the U.S. and its partners. The U.S. deters adversaries through a network of diplomacy, development, and defense capabilities; however, national forces and corporations still use cyberspace to steal technology, threaten critical infrastructure, and challenge free and open democratic processes.
The Department of Defense has already fostered relationships with private sector entities who possess advanced cyber capabilities. In June, the Pentagon announced its plans for a $250 million Ukraine Security Assistance Initiative, which includes funds for cyber defense and strategic communications to counter Russian cyber offensive operations and misinformation.
In April, USAID launched its first-ever Digital Strategy that highlights how the Agency will expand its ability to provide support to the cybersecurity needs of stakeholders. The strategy’s focus on cybersecurity together with the Ukraine portfolio shows USAID is ready to lead an inter-agency effort designed to strengthen our national security through cyber resilience.
By aligning our cyber efforts, USAID, the State Department, and the Department of Defense can proactively identify threats and weaknesses, build cyber resilience, and ensure our partners continue to progress on their journey to self-reliance.
About the Author
Marc Rockwell-Pate is the Senior Advisor of Communications and Outreach at USAID’s Office of Civilian-Military Cooperation. He wrote this article working with the civilian-military cooperation team at the Department of Defense’s U.S. European Command, as well as members of the energy team at USAID’s Ukraine Mission.
