Role enactment and the contestation of global cybersecurity governance

This research seeks to unpack the development of the EU as a security actor in cyberspace. Drawing on the theoretical approach of role theory, this article shows that the EU’s role in cyberspace should be understood in relationality to the other poles. On the one hand, the declining hegemonic role of the US in cyberspace as well as the divergence between the US and the EU with regard to cybersecurity governance has made the EU more aware of the need for cyber sovereignty and strategic autonomy. Therefore, the EU seeks to pursue a role of an autonomous cybersecurity player through the enactment of cybersecurity at institutional and operational level. On the other hand, under conditions of increasing interdependence, the EU has considered international cooperation to address challenges in cyberspace as a strategic priority, therefore seeking to act as a promoter of a multi-stakeholder model. Moreover, interpolariy in cyberspace determines the contestation of EU role by other poles. While the EU has recorded some small successes as a regulation-setter, emerging poles of power in the cybersecurity domain contest the EU’s desired role, promoting more state-centric approaches and seeking to transfer regulatory authority in the cybersecurity domain to the UN