Preserving the capacity to defend: When global cyber threats meet fragmented regulation

Cyber regulation is expanding across jurisdictions and sectors for understandable reasons. Threats are moving faster, dependencies are deepening, and governments are under pressure to set clearer expectations for resilience. The harder question is whether those obligations are developing in ways that organisations can implement coherently.

For many entities, the challenge is not one requirement in isolation. It is the way cyber requirements diverge across borders, vary by jurisdiction, and then sit alongside privacy, corporate governance, critical infrastructure and sector-specific obligations. What emerges is not simply a stronger compliance environment, but a more complex one.

In practice, that complexity has operational consequences. Security effort can be redirected into coordination overhead, duplicated assurance activity and slower decision-making, even where the policy intent is sound. The burden is not only financial or administrative. It also appears in human workload, cognitive strain and the difficulty of maintaining clear priorities in already pressured environments.

A central focus of the presentation will be the distinction between useful uplift and compliance friction. Some regulatory settings strengthen resilience by clarifying accountability and lifting capability. Others create additional burden without delivering the same security value, particularly where obligations are poorly aligned or difficult to operationalise.

This session will argue that the issue is not whether cyber regulation should expand, but how. In a more contested and interdependent environment, stronger outcomes depend on whether obligations align in ways that preserve defensive capacity, support sound judgement and allow organisations to respond well under pressure. The presentation will offer a practical lens for thinking about coherence, interoperability and resilience in a world where fragmentation is becoming a security issue in its own right.