France’s New Offensive Cyber Doctrine

The French approach to cybersecurity and defense contrasts with that embraced by the United States or the United Kingdom. Most notably, France assumes a clear separation between offensive and defensive cyber operations and actors. This means that, contrary to the National Security Agency or the U.K.’s Government Communications Headquarters, France’s leading agency for cybersecurity is not part of the intelligence community. This is a defining element of the Cyber Strategy Review and infuses the whole structure of French cyber defense. The rational is that having a distinct defensive agency separate from offense-oriented military intelligence agencies “facilitates the acceptance of State intervention […] whether in public administration or the economic sphere”. This article outlines the concepts and values that underpin France's emerging approach to cyber operations and strategy. Key Words: Cyber Strategy, Cyber Defense, Cyber Offense, Cyber Deterrence, Cybersecurity, France