Cyber policy
This page lists resources on cyber policy, fellowships, and think tanks.
Cyber policy resources
This list is an introduction to the field. While we couldn’t include many great resources here, we encourage you to do your own research on particular topics of interest.
Newsletters
- Weekly Cybersecurity, Politico
- Crypto-Gram, Bruce Schneier
- Zero Day, Kim Zetter
- The Hacker News
- Cybersecurity 202, Washington Post
- Axios Codebook
Books
- Confronting Cyber Risk: An Embedded Strategy for Cybersecurity (2021)
- The Hacker and the State: Cyber Attacks and the New Normal of Geopolitics (2020)
- This is How They Tell Me the World Ends: The Cyber Weapons Arms Race (2020)
- The Fifth Domain: Defending Our Country, Our Companies, and Ourselves in the Age of Cyber Threats (2019)
- Cybersecurity Ethics: An Introduction (2017)
- The Cybersecurity Dilemma: Hacking, Trust and Fear Between Nations (2016)
- Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon (2014)
Podcasts
- Darknet Diaries
- Security Now
- Lawfare Cyberlaw
- 80,000 Hours Podcast episodes with Sella Nevo, Bruce Schneier, Nova DasSarma, and Christine Peterson
Online courses
- The Citizen Clinic Cybersecurity Education Center, CLTC Berkeley
- Google Cybersecurity Professional Certificate, Coursera
- Cybersecurity Trainings, CISA
- Tech Diplomacy Academy, Krach Institute for Tech Diplomacy at Purdue (paid)
Think tank reports and policy analysis
- Congressional Research Service reports (search term “cyber”)
- Will AI Make Cyber Swords or Shields? (2022), Center for Sec. & Emerging Technology
- Policy magazines: Lawfare – Cybersecurity & Tech; War on the Rocks – Cyber; Bulletin of the Atomic Scientists – Cyber Security
- Unpacking Cyber Capacity-Building Needs Part I & Part II (2023), UNIDIR
- AI & International Conflict in Cyberspace (2023), Hague Program on International Cybersecurity
- Microsoft Digital Defense Report (2023)
Government strategies
- National Cybersecurity Strategy (2023), White House
- CISA Cybersecurity Strategic Plan FY 2024-2026 (2023), Cybersecurity and Infrastructure Security Agency
- Executive Order On Improving the Nation’s Cybersecurity (2021), White House
- Achieve and Maintain Cyberspace Superiority (2018), Command Vision for US Cyber Command
- Global: Cyber Policy Portal, UN Institute for Disarmament Research (UNIDIR)
Conferences
- Billington CyberSecurity
- RSA Conference (counts for continuing education credits for ISC2, the biggest infosec professional network)
- DEF CON
- Black Hat
- BSidesNoVA
We aim to keep this page updated. You can recommend other resources here.
Cyber-relevant policy fellowships
The following fellowship programs are especially relevant for cyber policy work (see also our full fellowship database for 50+ opportunities):
- US Digital Corps – a 2-year fellowship offers an early-career technology opportunity for recent graduates to build their skills in the five broad skill tracks of cybersecurity, software engineering, data science and analytics, product management, and design. Fellows will be able to convert to a full-time career position upon successfully completing the program.
- NobleReach Scholars (NobleReach Foundation) – a 1-2 year full-time technology policy fellowship in government or mission-driven private companies for early-career technologists focusing on AI, biotech, computing & cybersecurity, or other areas.
- Cybersecurity Talent Initiative (Partnership for Public Service) – “Receive an employment offer from a federal agency for two years.”
- CISA Cyber Innovation Fellows Initiative (Cybersecurity and Infrastructure Security Agency) – a four-month fellowship for technical experts from the private sector to work with CISA’s cybersecurity teams.
- DHS Intelligence and Cybersecurity Diversity Fellowship Program (Department of Homeland Security) – “During the 12-week program, participants will be immersed in a federal work environment by collaborating with subject matter expert mentors on projects and performing assigned tasks on the intelligence and cybersecurity track.”
- CyberCorps Scholarship for Service – a scholarship for up to 3 years for cybersecurity undergraduate and graduate (MS or PhD) education, providing tuition and education related fees, an annual stipend of $34,000 for graduate students, and a professional allowance of $6,000 for SFS Job Fair and other travel, professional certification, etc. Involves a post-graduation service requirement equal to the scholarship’s duration in the US government, in a cybersecurity-related position.
- Cyber Policy Leadership Institute (POPVOX Foundation) – a networking and educational program for US college and graduate students of all disciplines “from historically marginalized groups, with the aim of cultivating the next generation of diverse cyber policy leaders.”
- #ShareTheMicInCyber Fellowship (New America) – a 12-month fellowship supporting mid-career cybersecurity professionals from diverse backgrounds to conduct policy research.
- Science & Technology Policy Fellowship (Aspen Tech Policy Hub) – a full-time, paid, three-week program that teaches science and technology professional about policy, including a focus on cybersecurity.
- Catherine Hinman Memorial Fellowship (Silverado Policy Accelerator) – a summer program for US graduate students pursuing public policy careers. Cybersecurity is among the program policy areas of focus.
- Berkman Klein Center for Internet and Society Fellowship Program – a 12-month academic research fellowship at Harvard University.
- Social Media Lab Fellowship (Center for International Security and Cooperation, Stanford University) – an academic research fellowship for predoctoral and postdoctoral students, and junior faculty, coordinated by Stanford’s Cyber Policy Center and Social Media Lab
- Global Emerging Leaders in International Cyberspace Security (GEL-ICS) Fellowship (State Department, Bureau of Cyberspace and Digital Policy) – a 12-month cyber policy fellowship for non-American mid-level or emerging leaders in ministries of foreign affairs or other relevant agencies
- The Atlantic Council Cyber 9/12 Strategy Challenge – a 2-day interactive learning and competitive scenario program designed to give students “a deeper understanding of the policy and strategy challenges associated with management of tradeoffs during a cyber crisis.” Multiple challenges happen annually in the US and internationally; 2025-26 locations include DC, New York, and Dundee, UK.
General science and technology policy fellowships relevant to cyber policy:
- Horizon Fellowship (Horizon Institute for Public Service) – a 6-24 month full-time US emerging technology policy fellowship facilitating job placements in the US executive branch, Congress, and think tanks for early- and mid-career individuals. (Note that the Horizon Fellowship and this website are both projects of the Horizon Institute.)
- AAAS Science and Technology Policy Fellowships (American Association for the Advancement of Science) – a 12-month fellowship in DC with four separate tracks, that places fellows within the executive branch, judicial branch, legislative branch, or in a nonprofit. The fellowship is for individuals with a doctoral-level degree.
- TechCongress Congressional Innovation Fellowship (TechCongress) – a 10-12 month full-time fellowship for early and mid-career professionals involving placements with a Member of Congress or a Congressional Committee
- STPI Science Policy Fellowship (Institute for Defense Analyses) – a 24-month, full-time fellowship for recent bachelor’s or master’s graduates, in which fellows work with teams of researchers to support S&T policy-related tasks
- Emerging Scholars in Technology Policy (Princeton University, Center for Information Technology Policy) – a 2-year tech policy research position with coursework and mentoring
- Technology and Geopolitics Fellowship (Belfer Center, Harvard Kennedy School) – 10-month academic research fellowship at Harvard University for doctoral students, PhD holders, or mid-career professionals, including “employees of government, military, private research institutions…or the private sector who have appropriate personal experience”
Think tanks working on cyber policy
This list isn’t comprehensive, but we hope it’s a useful starting point if you’re interested in think tank work on cyber policy.
- Council on Foreign Relations (CFR): Digital and Cyberspace Policy Program
- Atlantic Council: Cyber Statecraft Initiative, Cybersecurity
- Center for Strategic and International Studies (CSIS): Cybersecurity
- Brookings Institution: Cybersecurity
- Center for Security and Emerging Technology (CSET): CyberAI Project
- Carnegie Endowment for International Peace: Cyber Policy Initiative
- RAND Corporation: Meselson Center, Cybersecurity, Cyber Warfare, Cyber & Data Sciences
- Center for a New American Security (CNAS): Technology and National Security program – Critical Digital Infrastructure
- Aspen Digital: Cybersecurity Workstream
- Heritage Foundation: Cybersecurity
- New America: Cybersecurity Initiative
- Stimson Center: Cyber Accountability
- UC Berkeley Center for Long-Term Cybersecurity
- Harvard University: Berkman Klein Center for Internet and Society, Belfer Center for Science and International Affairs (Cyber Project)
- UNIDIR: Security and Technology
- Stanford University: Stanford Cyber Policy Center
- Leiden University: The Hague Program on International Cybersecurity
