ABSTRACT

This chapter draws a map of the cyber threat landscape in Brazil, which includes dimensions of defense policy, concerns cyber terrorism, and cybercrime. It traces the shifting threat concerns since the initial build-up of the government’s cyber infrastructure and points to how it slowly adjusted to respond to high impact/low probability threats – instead of focusing on high probability ones. The chapter presents an overview of the cyber security institutional landscape and the main concepts from the country's national cyber security documents that have contributed to structuring the contemporary governance landscape. It then traces the challenges and opportunities for political action, concluding with the diagnosis that one of the main challenges faced by those engaged in cyber security policy making is the poor alignment between strategy and actual threats. The Brazilian institutional architecture distinguishes cyber security competencies from information security and cyber defense.