Last week, France published its National Cybersecurity Strategy for 2026-2030.
The strategy defines cyberspace as a “theatre of power” and a field of operations where the independence of states and the security of citizens are decided.
By integrating offensive cyber operations into a broader deterrence doctrine and leading international efforts such as the Pall Mall Process, France seeks to assert its sovereignty in the digital age.
The goal is to transform cyberspace into a space where the costs of aggression outweigh the benefits, supported by a robust industrial base and a strong talent pool.
By coordinating military, diplomatic, and technical levers, France aims to significantly increase the financial and reputational costs for adversaries while upholding international law and promoting a stable, multi-stakeholder governance model for the digital century.
France’s strategic vision is predicated on transitioning from a spectator to an active sovereign power. The strategy consolidates a national model that strictly separates defensive and offensive missions while ensuring they are coordinated at the highest levels of government.
Under Pillar 3 (“Halting the Expansion of Cyber Threats”), the strategy aims to discourage attacks against French interests by:
1. Increasing adversary costs: Mobilizing judicial, technical, diplomatic, military, and economic levers to raise the financial, human, and reputational risks for perpetrators.
2. Credible offensive capacity: Utilizing national cyber offensive capabilities to defend interests firmly and effectively, ensuring these actions remain in “strict compliance with international law.”
3. Public attribution: The state reserves the right to use public attribution as a response to cyberattacks, to be proposed to political authorities following a coordinated analysis.
France rejects the logic of “geopolitical blocs” that lead to digital fragmentation. Instead, it advocates for a “free, open, secure, and non-fragmented cyberspace” through established international mechanisms.
France is supporting multilateral and multi-stakeholder initiatives, including:
– United Nations reform: France is working to establish a Global Cybersecurity Mechanism by 2026. This aims to operationalize commitments to responsible state behavior agreed upon in 2015.
– Judicial cooperation: The strategy emphasizes the Budapest Convention and the new UN Convention on Cybercrime as essential frameworks for combating cybercrime while respecting human rights and state sovereignty.
– European strategic autonomy: France supports the EU Cyber Reserve and the Cyber-Diplomatic Toolbox, including sanctions against malicious actors.
Military and Alliance Cooperation
Moving beyond a defensive posture, the strategy asserts France’s ambition to be a sovereign power capable of deterring attacks through a clear, credible doctrine that integrates offensive cyber capabilities.
