The Global Cyber War

Cyber conflict between states is no longer an occasional crisis. It is a standing condition, run in peacetime, and it lands first on companies, utilities and telecoms carriers rather than on armies. Almost every operation examined in this book was designed to stay below the threshold of armed attack, and that is what makes it effective.

The Global Cyber War asks leaders to keep three things apart: what an agency reported, who it said was responsible, and what your own evidence shows. Then act on the exposure, whatever the name on the report. Access comes first; effect comes later.

The analysis is organised in ten parts:

- State cyber power
- Cyber espionage
- Pre-positioning
- Destructive operations
- Critical infrastructure
- AI-enabled intrusion
- Commercial intrusion ecosystems
- Cyber deterrence
- Attribution and response
- Enterprise defence

An outlook for 2027 to 2030 sets out scenarios and signposts. The reference core applies the CLEAR method (Claim, Local evidence, Exposure, Action, Recovery) to turn threat reporting into proportionate defensive action and proven recovery.

Each book in this format pairs analysis with a practical reference core: an executive briefing, a named decision method, case studies, operational tools, a scenario workshop, an implementation plan, measurement and maturity guidance, a glossary and primary references. Documented external evidence is kept separate from the author's analytical frameworks, and indices and scenario scores are presented as decision aids, not forecasts.

Written for CISOs, security leaders, boards and critical infrastructure operators.