Abstract: Specialised digital-reserve functions are becoming increasingly important in how states conceptualise reserves in national and allied security. Alongside traditional reserve roles, digitally-specialised reservists can mobilise scarce expertise in cyber defence, data, cloud systems, and AI. Drawing on civilian and academic professionals, they may strengthen resilience against hybrid threats while raising questions of interoperability, legality, governance, and democratic accountability.
Problem statement: How can Western democracies develop specialised digital-reserve functions for cyber defence, hybrid threats, and multi-domain operations while integrating them effectively with broader reserve and defence structures?
So what?: NATO and EU member states should integrate specialised digital-reserve functions into broader defence planning, C4ISR reform, training systems, and civilian cyber-defence frameworks, while balancing operational effectiveness with privacy and democratic accountability.
Introduction
Historically, the concept of a reserve has been tied to mass military mobilisation, compulsory service, and reinforcement of conventional formations during crises or war. The classic “analogue” model depends on linear mobilisation processes, territorially organised units, and relatively predictable conventional scenarios, in which sufficient warning time allows for gradual escalation. In this framework, reserve value is measured primarily by the numbers and volume of available personnel.
However, rapid technological change, the spread of disruptive innovations, and the rise of hybrid conflicts have eroded the viability of this model.[1] Today, threats span cyberspace, space, and the information domain, integrating cyberattacks, influence operations, and attacks on critical infrastructure with traditional military operations.[2] With shortened reaction times and blurred peace-crisis boundaries, exclusive reliance on large, predominantly conventional reserve structures may be insufficient in specific hybrid-threat contexts.
A specialised Digital-Reserve emerges as a targeted response. Such a reserve could prioritise specialised skills in cyber defence, data analytics, network security, cloud systems, and AI rather than sheer numbers.[3] It could draw on private-sector and academic professionals with expertise, integrating them into defence structures without severing ties to the civilian economy. This shift aligns with broader defence digital transformation—embracing data-centric architectures, multi-domain operations, and secure digital backbones. Recent discussions of NATO’s digital transformation highlight the growing relevance of cyber reserve functions, civil-military technological linkages, and resilience-oriented defence planning.[4] This makes specialised digital-reserve functions increasingly important for specific defence and resilience missions.[5] Yet it raises key questions: defining roles in peacetime and crisis, protecting data and infrastructure, balancing military needs with political constraints, and minimising institutional and societal frictions. The analogue/digital distinction is used here as an ideal-type analytical heuristic, not as a claim that digital reserves replace traditional reserve forces. Rather, the argument is that specialised digital-reserve functions can complement broader reserve structures in domains where scarce technical expertise is operationally decisive.
Conceptual Framework
Digital Reserve
One common form of reserve organisation comprises human and material resources activated through standardised mobilisation procedures for reinforcement, territorial defence, and other assigned functions. In Western armed forces, reserve components may include both generalist human resources and pre-designated capability elements, such as medical, engineering, logistics, and territorial defence functions. The distinction drawn here is therefore not between “mass only” and “capabilities only”, but between reserve arrangements oriented mainly toward broad conventional reinforcement and those designed to mobilise scarce, high-value digital expertise.
A digital reserve, as used in this article, refers to reserve arrangements that prioritise the mobilisation of specialised technical expertise over conventional reinforcement functions. Such reservists may augment specific missions as individual experts—such as cyber incident responders, threat analysts, cloud architects, or AI engineers—within broader defence and resilience structures.
Digital Transformation and Specialist Personnel
In the context of NATO 2030 and the Alliance’s broader digital transformation, particular importance has been attached to the use of personnel with digital and cyber-technological expertise. The contribution of this human capital is enhanced as operations become more “data-centric” and multi-domain, as they depend on interoperable networks, secure data flows, and a reliable “digital backbone” of allied C2 systems.[6]
Three Key Functions
For a digital reserve to be operationally useful, it must function as a complementary force to national cyber defence, providing three basic services. First, by enhancing the defence and resilience of critical digital infrastructure, acting as a complementary capability that contributes to the overall strengthening and safeguarding of population security and critical service providers, through continuous training, exercises, and support for public and private sector structures.[7]
Second, by providing rapid support for prevention, response, and recovery in serious cyber incidents and emergency situations, thereby strengthening the state’s capacity to respond quickly to cyber incidents. Rapid support for prevention, response, and recovery has been identified in the Baltic literature as an important component of credible cyber deterrence, particularly where readiness, attribution, and public signalling are central to national strategy.[8]
Third, by performing a politico-strategic function of “knowledge utilisation”, through participation in exercises, collection and analysis of threat intelligence, vulnerability assessment, and “red teaming” activities. In doing so, they effectively provide threat information and performance support to security authorities and decision-makers. This is particularly crucial in a competitive hybrid environment, where uncertainty and attribution problems undermine the reliability of cyber deterrence; without the ability to identify the attacker, deterrence strategies lose both their credibility and effectiveness.[9]
Turning Point: The Whole of Society
The growing importance of specialised digital-reserve functions constitutes an institutional turning point insofar as it reinforces a broader whole-of-society approach to defence. In cyberspace, national defence relies on existing networks of cooperation among commercial, governmental, and academic entities, as well as on voluntary bodies such as the “Estonian Defence League”, where specialists from the private and public sectors are integrated into an organised national defence framework. A large volume of relevant skills, tools, and infrastructure resides in private and academic ecosystems; therefore, defence presupposes institutionalised collaborations, common rules and protocols for information exchange, as well as models of voluntary participation that fit into a clear legal and organisational framework. The effectiveness of such “cyber-reserves” depends on the systematic training and preparation of members. It also depends on secure access to and management of both commercially sensitive and classified information, as well as on flexible service models that respect the professional obligations of volunteers, given that, during crisis periods, these same specialists are often critical to the security of the organisations in which they work.[10]
Critical Design Variables
The key design variables of a digital reserve are typically highlighted in the case of the Cyber Defence Unit (CDU) of the Estonian Defence League, a voluntary, militarily-organised national defence organisation. The CDU emphasises the need for access to classified and confidential information—both state and commercial—and the availability of volunteers through legislative guarantees for members and their employers in crisis, which are critical organisational and legal prerequisites. Without them, the reserve risks either failing to effectively support the state and critical entities in crisis or creating additional risks to security and legality.[11] In this sense, digital reserve arrangements should be understood primarily as complementary force multipliers: they do not eliminate the need for conventional reserve structures, but add specialist functions that many standing forces cannot easily generate at speed from within their regular establishments alone.[12]
National Models and Case Studies
Why the Baltics?
Due to their small size and proximity to Russia, the Baltic countries—Estonia, Latvia, and Lithuania—experience intense strategic pressure and asymmetric threats. The Russian threat manifests not only through traditional military means but also through asymmetric warfare, intelligence operations, economic tools, cyberattacks, and disinformation campaigns. Consequently, the Baltic democracies have systematically directed their attention and resources toward strengthening their political, economic, and military stability. These states have significantly increasing investments in defence and cybersecurity, and adopting “total defence” and resilience approaches that combine state, military, and societal tools. Under such conditions, cybersecurity is treated as a fundamental component of political deterrence, a means of enhancing their credibility as reliable and predictable allies in NATO and the EU, and a central mechanism for cultivating a broader culture of digital and societal resilience. This emphasis on cybersecurity as a core element of deterrence and resilience is also reflected in wider debates on NATO’s digital transformation and the role of cyber-oriented reserve functions in linking military institutions, civilian technological expertise, and resilience-oriented defence planning.[13]
Latvia and Lithuania have followed similar strategic trajectories, structuring their cyber deterrence policies around strengthening defensive capabilities in cyberspace, international cooperation, and the prevention and combating of cybercrime. Both states emphasise attribution capability and credible public response mechanisms as key elements of cyber deterrence, while integrating their efforts into NATO and EU frameworks. Although neither has replicated Estonia’s Cyber Defence Unit model in full, Latvia and Lithuania invest in public–private partnerships and resilience programmes that mobilise limited national resources through allied connectivity and participation in international training and exercise frameworks.[14]
Estonia: The Cyber Defence Unit
Starting as a public-private sector cooperation and spurred by the 2007 cyberattacks, the Estonian Cyber Defence Unit (CDU) has gained international recognition as an innovative model for volunteer participation in national cyber defence. According to a NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) analysis, the CDU’s orientation includes strengthening the professional skills of volunteer members to support crisis response, promoting public-private cooperation, and enhancing cyber awareness among the population.[15] The same study emphasises that the CDU’s role in national cybersecurity is recognised in political and legislative documents, while the relevant law explicitly integrates the CDU into the national defence system. This institutional “normalisation” is critical because volunteer experts require clear rules: who issues orders, what responsibilities they have, what information they can access, and how to avoid friction with commercial secrets or classified data.[16] As the most institutionalised and extensively documented example in the region, Estonia provides a useful analytical case for understanding how digitally specialised reservists can be embedded into a broader whole-of-society defence model.
Strategies and Deterrence in the Baltics
Górka’s analysis of Baltic cyber deterrence policies argues that Estonia, Latvia, and Lithuania structure their policies around defensive capabilities in cyberspace, international cooperation, and the prevention and combating of cybercrime, with particular emphasis on readiness and rapid response to incidents. In the same context, the discussion on cyber deterrence repeatedly underscores that the difficulty in attribution and the need for a credible, public, and clearly articulated response—directed toward the adversary and the international community—determine whether a deterrence strategy carries real weight or remains at the level of rhetoric.[17]
When a country organises a reserve of digital skills, it not only enhances its defence but also improves its capability to document/evaluate incidents (vulnerability assessment, situational awareness), which is directly linked to the credibility of deterrence and the possibility of timely political decision-making. In small states, where resources are limited, the strategic value of the reserve grows because it enables the mobilisation of skills and experience developed largely outside the state apparatus, while maintaining allied connectivity and access to international exercise and training frameworks.[18]
The Estonian case illustrates this dynamic in practical terms. The CDU is embedded in an institutional framework that links volunteer expertise, public-private cooperation, crisis response, and cyber awareness. In this respect, Estonia offers a concrete example of how specialist reservists can support resilience by strengthening information-sharing, preparedness, and the protection of critical information infrastructure.[19]
The Estonian CDU illustrates how small democracies can integrate “digital” reserves into “total defence” and whole-of-society approaches; larger allies follow different organisational paths. Two cases—the United Kingdom and Israel—highlight how digital reserves can be embedded either in complex institutional and technological reforms (UK) or in intense military–industrial pipelines with pronounced ethical dilemmas (Israel). These experiences provide comparative insights for NATO and EU members as they design their own models.
UK: Joint Cyber Reserve Force and Digital Strategy
In the United Kingdom, the creation of the Cyber Reserve Force (CRF) marked the recognition of the need for specialised cyber-Reservists to enhance the defence capabilities of the Ministry of Defence and the country more broadly against advanced cyber threats.[20]
The CRF is integrated into a broader digital strategy for defence, within which the Ministry of Defence (MOD) seeks to become a “digital-by-design” organisation. The strategy is founded on a secure, modern digital infrastructure that enables access to data and the transition to interconnected digital systems. It also emphasises that the growing use of digital capabilities expands the cyber threat surface and increases the need for specialised skills and continuous personnel renewal, including reservists.[21]
“Cloud”, Industry, and Allies in the UK
The recent agreement between the United Kingdom and Google Cloud to modernise the exchange of classified information with the US highlights the interdependence among digital transformation, economic and industrial renewal, and military capability. The agreement, valued at approximately £400 million, is presented as a critical component of the broader defence digital strategy, aimed at creating a secure and resilient cloud environment for highly sensitive data and accelerating the secure exchange of information with key allies.[22]
In the UK, strengthening the digital/cyber capabilities of the reserve means that specialised personnel are called upon to operate in environments where technological infrastructure extends beyond the classic networks of the Ministry of Defence and includes cloud, operational networks, and systems that are partly owned by commercial providers and industrial partners, while the state retains responsibility for data governance and their operational exploitation. The development of the British “Defence Digital Backbone” and the emphasis on the overall resilience of the defence supply chain, intelligent threat detection, and coordinated response across the entire digital ecosystem of the Ministry of Defence increase the need for specialised “digital” personnel (regular or reserve) capable of bridging technological and institutional gaps between state entities, industry, and partners.[23]
Israel: Unit 8200 as a Hub of Digital Power
Israel has built a distinctive digital power ecosystem centred on Unit 8200 of the Israel Defence Forces (IDF), which serves as the primary hub for signals intelligence (SIGINT), cyber operations, and technological innovation. Comparable to the U.S. National Security Agency (NSA) or Britain’s GCHQ, the unit conducts global communications collection and analysis, develops offensive cyber tools, and supports multi-theatre operations.[24] It has been linked—at least in part—to major cyber actions, including the Stuxnet virus as part of the joint U.S.-Israeli “Olympic Games” operation against Iranian nuclear facilities, and the 2017 attack on Lebanon’s Ogero telecom provider to spread disinformation, demonstrating its role in advanced SIGINT and cross-border offensive cyber warfare.[25] Operationally, Unit 8200 is indispensable to Israeli defence strategy, relying on real-time SIGINT fusion, drone/sensor data, and AI tools for target identification and decision-making. Its public acknowledgement of AI use in targeting Hamas’s operations underscores its leadership in integrating AI into military operations, carrying significant military advantages alongside profound ethical and political implications.[26]
Although Israel is not a member of NATO nor the EU, it is included here not as a direct institutional model of a digital reserve unit, but as a comparative case for understanding how technologically advanced military service, reservist experience, and dense military–industry linkages can generate specialist expertise with wider defence and economic implications.
Reserve, Conscription, and Human Capital
Israel’s model combines compulsory military service with a robust reserve system, while Unit 8200 serves as the core of the country’s technological and SIGINT ecosystem rather than as a reserve unit in its own right. Its relevance here lies in the way active service, reserve obligations, and civilian-sector spillovers interact over time. After extended mandatory duty, personnel remain in the general reserve pool—combining traditional volume-based reserves with highly specialised digital expertise—and return for exercises until around age forty. They simultaneously transfer acquired leadership, technical, and entrepreneurial skills to Israel’s political economy, especially cybersecurity startups and information technologies, where Unit 8200 functions as a renowned “incubator” with a dense, active alumni network.[27] Estimates suggest that roughly one-third of CTOs and founders in Israeli cybersecurity firms have served in Unit 8200 or related units, creating a powerful pipeline between the military and industry. This cyclical flow generates a high-intensity “digital” reserve of knowledge that can be rapidly mobilised in crises via established mechanisms while driving economic growth and technological leadership. Firms such as Check Point, Wiz, and Orca are often associated with founders or senior figures who have served in Unit 8200 or related technological units, illustrating the broader linkage between military technological service and Israel’s cybersecurity ecosystem.[28] Thus, a digital reserve would serve not only as a defence instrument but as a strategic national asset in economic and technological domains.
Implications for the Digital Reserve Model
The Israeli experience offers three comparative insights relevant to debates on digitally specialised reserve functions. First, it highlights the importance of a coherent pipeline policy that begins with education, continues with targeted recruitment into technological units, and concludes with reserve service and industry interconnection as a mechanism for the continuous renewal of digital human capital.[29]
Second, it emphasises the role of networks of reservists and Unit 8200 alumni as bridges between military and civilian expertise, which—through the periodic reintegration of reservists and the global “alumni” community—facilitate the rapid reinforcement and adaptation of cyber capabilities during crises.
Third, it demonstrates that the success of “digital” reserves cannot be evaluated solely on technical or operational criteria, but also on the extent to which their practices align with the state’s values and legal obligations.
For Western democracies seeking to shape a digital reserve within the framework of NATO and the EU, the Israeli case serves as a reminder that technological superiority must be accompanied by strong institutional checks and balances and oversight mechanisms.
Alliance-Level Challenges
Interoperability and the “Digital Backbone”
The national models discussed above point to diverse pathways for organising digital reserves, but they converge on a common set of alliance-level constraints. The primary structural challenge for any specialised digital-reserve function within NATO and, where relevant, EU member-state frameworks is interoperability—at both technical and organisational levels. Discussions on the NATO “digital backbone” reveal persistent fragmentation: European Allies suffer from isolated systems, uneven investments, and underdeveloped digital frameworks. Many lack secure, scalable cloud architectures, high-performance AI processing, and standardised platforms. Without a coherent, resilient digital backbone—built on federated cloud infrastructures, standardised data formats, cybersecurity protocols, and unified cloud frameworks—the integration of any digital reserve would remain patchy and vulnerable. Gaps in harmonised architectures and secure data flows among European members weaken operational cohesion and slow the incorporation of specialised Reservists into multinational missions.[30] NATO’s Digital Transformation Strategy and Allied Command Transformation initiatives stress a shift to data-centric operations, treating data as a discoverable, accessible, reliable, secure, and shareable strategic asset. For reserves, effectiveness hinges on seamless integration with this architecture through appropriate access controls, classification handling, and technical training—without introducing new security vulnerabilities or silos.[31]
Data Governance, Privacy, and Capability Imbalances
Beyond interoperability, data governance and privacy protection are major challenges to any digital reserve. As the Alliance’s “digital backbone” depends on interoperable cloud platforms and C4ISR systems, where such reservists are granted access to sensitive systems, incorporating reservists into environments handling sensitive or classified data heightens the risk of leaks, misuse, or conflicts of interest—especially when these experts hold private-sector roles in high-value markets. A secure, coherent backbone thus becomes essential for credible Alliance operations.[32] NATO’s digital strategy insists on embedding data protection and security from the outset, with robust risk management and digital mission assurance mechanisms.[33] EU members face additional obligations under frameworks such as the General Data Protection Regulation (GDPR): clear definitions of permissible data handling, legal regimes, and accountability structures are required.
Compounding this are intra-Alliance capability imbalances in digital transformation. European NATO members exhibit wide disparities in infrastructure maturity, AI adoption, and C4ISR systems due to fragmented investments and a lack of standardisation.[34] Consequently, digital reserve development is uneven: small, highly digitised states like Estonia excel with innovative, voluntary “whole-of-society” cyber defence models, while larger states lag in institutionalising civilian expertise and societal defence participation despite strong industrial bases.[35] These risks overburden a few “digital pillars” while others become mere consumers of capabilities, leading to mission dependence on limited national ecosystems with significant politico-strategic implications.
Social Legitimacy and Expert Fatigue
Finally, social legitimacy and expert fatigue pose critical challenges in an era where cyber defence extends beyond state institutions. Models like Civil Cyber Defence (CCD)—inspired by Estonia’s Cyber Defence League[36]—demonstrate that voluntary, strictly defensive civilian participation can significantly boost national resilience when embedded in clear institutional frameworks with strong oversight.[37] These rely on patriotically motivated citizen-experts acting as civilian auxiliaries to enhance collective cybersecurity—excluding offensive roles—and include safeguards against unregulated “cyber militias”. A complex threat landscape necessitates a “whole-of-society” approach, but inadequate oversight, poor vetting, and role ambiguity can create serious risks.
Overdependence on a narrow pool of elite specialists—who juggle demands from the military, government, and private sectors—may exacerbate talent leakage and brain drain, thereby eroding availability and readiness. Sustaining long-term engagement and morale requires thoughtful incentives and flexible, part-time arrangements that allow reservists to remain active without abandoning civilian careers.[38]
Innovative Policy Proposals
Digital Reserve Units and Modular Design
A first proposal is the design of modular digital reserve units as distinct capability modules that can be integrated into national and allied C4ISR structures and modular architectures. In this way, the logic of modular, open architecture based on interoperable APIs and resilient, unified “cloud” infrastructures can be extended to human resources, facilitating the rapid integration of specialised reserve teams into multinational operations and joint operational centres.[39] At the NATO level, common specifications for tactical building blocks could be incorporated into certification standards, enabling a national cyber reserve cell to be rapidly deployed under allied C2.
Inter-Alliance Platform for Cyber Reservist Training and Certification
A second proposal concerns the creation of an inter-Alliance platform for training and certification of cyber-reservists, which would connect academic institutions, centres of excellence, and industrial partners, following the model of cooperation, training, and certification networks proposed for Civil Cyber Defence. Rather than reservists being trained exclusively in a national context, a common platform could offer harmonised curricula, common standards, and continuous upskilling for volunteer cyber defenders.[40] The platform could also serve as a mechanism for socialisation into a shared operational culture, reducing cultural/organisational frictions in multinational exercises and missions.
National Civilian Cyber Defence Corps with a Secure Legal Basis
A third proposal addresses the issue of adopting, in selected states, the models for a Civilian Cyber Defence Corps, inspired by the Estonian experience and the analysis of CCD, as a new pathway for civic participation.[41] Such a corps would constitute voluntary, strictly defensive structures, integrated into national frameworks for civil protection and cybersecurity, with clear legal rules, selection/security mechanisms, and a mandate focused on protecting critical infrastructure, education, and public awareness. The existence of a civilian-volunteer pillar could relieve pressure on military digital reserves, enhance social legitimacy, and create a broader talent pool for future recruitment. In this context, education-linked schemes—for example, allowing university students to complete a defined period of service in a digital reserve or civilian cyber-defence corps as an accredited component of their studies—could offer both a tangible incentive and an early pathway into such specialist roles.
Integration of “Digital” Reserves into Allied C4ISR Reform
Finally, digital reserves should be conceived and designed explicitly as an organic part of the broader C4ISR reform, rather than as a parallel or merely complementary initiative. The Hague Centre for Strategic Studies’ recommendations for technological modernisation, institutional restructuring, and cultural change can be extended to include specific targets for the contribution of reserve forces in critical areas, such as cloud integration, AI adoption, and data management.[42] This would make “digital” reserves an integral element of NATO’s “digital backbone” rather than an ad hoc emergency solution, thereby facilitating resource allocation, capability development, and long-term strategic planning.
Conclusions
The adoption of “digital” reserves represents a profound structural shift in how states conceptualise reserves and their role in national and allied security. This does not imply that traditional reserves are obsolete or merely pools of mass without capabilities; rather, it suggests that reserve design increasingly needs to incorporate specialist digital functions alongside conventional reserve roles. This shift does not imply that traditional reserves were merely pools of “mass” without capabilities; rather, it marks a rebalancing from predominantly volume- and mobilisation-oriented reserve structures toward the systematic integration of scarce, high-value digital expertise into national and allied defence. Digital reserves rely on highly specialised human capital, critical infrastructure protection, and the ability of states and alliances to function in a persistent hybrid-threat environment—characterised by short warning times and blurred lines between peace, crisis, and conflict.
National models vary widely according to historical, political, and strategic contexts. The Baltic states, especially Estonia, emphasise total defence and whole-of-society participation through voluntary structures that bridge government, private sector, and tech communities—turning digital reserves into both operational assets and drivers of societal resilience and security culture. In contrast, larger powers like the United Kingdom focus on institutional integration within complex legal and administrative frameworks, linking reserves to cloud-based architectures and multi-domain operations. Success there depends on leveraging existing digital talent while avoiding bureaucratic frictions, authority overlaps, and demotivating conditions—requiring not just technical training but institutional flexibility and clear responsibility allocation. Israel illustrates yet another dimension: a powerful pipeline from high-tech military units to universities and industry generates rapid-mobilisation digital expertise that also fuels economic innovation, though it raises serious risks from capability over-concentration and ethical-legal issues tied to surveillance and AI.
At the Alliance level, digital reserves must intersect with three core challenges: interoperability, data governance, and social legitimacy. Without shared standards, a secure “digital backbone”, and transparent rules for information handling, they risk fragmentation, the emergence of new vulnerabilities, or the proliferation of unregulated expert networks. Equally critical is democratic oversight and societal trust—essential for long-term sustainability. Ultimately, digital reserves demand a renewed civil-military-society relationship: new incentives, contracts, and reciprocity for citizens moving between private, academic, and public sectors. When strategic vision, technical capability, and democratic principles align, they can become vital pillars of deterrence and resilience; otherwise, the transition remains incomplete, perpetuating old problems in a far more demanding environment.
[1] Henning Horan, Sofia Romansky, and Daniel Ellison, Securing the Digital Backbone: NATO’s Quest for Interoperability in the Age of Emerging Disruptive Technologies (The Hague: The Hague Centre for Strategic Studies, 2025), 1–4.
[2] NATO Allied Command Transformation, “Empowering NATO Multi-Domain Operations through Digital Transformation,” 2023, https://www.act.nato.int/article/empowering-nato-mdo-through-digital-transformation/.
[3] Michał Grzegorzewski, Michael Smith, and Brandon Koven, “Civil Cyber Defense: A New Model for Cyber Civic Engagement,” The Cyber Defense Review, December 5, 2023, 52, 57, 61.
[4] Gerassimos Karabelias, Konstantinos Zafeiris, and Georgios Chontos, “From the Analogue Warrior to the Algorithmic Strategist: The Evolution of Military Training through Artificial Intelligence,” Journal on Baltic Security 11, no. 2 (2025), https://doi.org/10.57767/jobs_2025_011.
[5] NATO Allied Command Transformation, “Multi-Domain Operations and Digital Transformation: Enabling Converging Effects,” 2025, https://www.act.nato.int/article/mdo-dt-enabling-converging-effects/.
[6] NATO, “NATO’s Digital Transformation Implementation Strategy,” October 17, 2024, https://www.nato.int/en/about-us/official-texts-and-resources/official-texts/2024/10/17/natos-digital-transformation-implementation-strategy; Maren Baezner, Study on the Use of Reserve Forces in Military Cybersecurity (Zurich: Center for Security Studies, ETH Zürich, 2020), 4, 7, 20, 31.
[7] Kadri Kaska, Anna-Maria Osula, and Jaan Stinissen, The Cyber Defence Unit of the Estonian Defence League: Legal, Policy and Organisational Analysis (Tallinn: NATO Cooperative Cyber Defence Centre of Excellence, 2013), 5, 11, 20, 37.
[8] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 24–25; Michał Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” Yearbook 22, no. 1 (2024): 57–60.
[9] Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” 50–51.
[10] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 5, 7, 9, 22, 31–33.
[11] In practice, “digital” reserves do not replace existing force structures; they complement standing capabilities by providing specialised skills scarce in the regular force. Where planners rely solely on digital reserves for core capabilities, this reflects conscious risk acceptance in force design rather than a simple shift from “mass” to “non-mass” forces.
[12] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 6, 9, 13, 29, 32–33, 39.
[13] Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” 46–48, 56.
[14] Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” 50–51, 57–60.
[15] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 5, 37.
[16] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 5, 12–13, 31–32.
[17] Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” 50–51, 57–58.
[18] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 22, 24, 32–33; Górka, “Cyber Deterrence Policies of the Baltic States in the Years 2016–2023,” 46, 57–60.
[19] Kaska, Osula, and Stinissen, Cyber Defence Unit of the Estonian Defence League, 5, 7, 11.
[20] UK Government, “Joint Cyber Reserve Force,” GOV.UK, 2023, https://www.gov.uk/government/groups/joint-cyber-reserve-force.
[21] UK Ministry of Defence, Digital Strategy for Defence: Delivering the Digital Backbone and Unleashing the Power of Defence’s Data (London: UK Ministry of Defence, 2021), 1, 10, 16–17, 24.
[22] James, “MoD Strikes £400m Google Cloud Deal to Strengthen Defence and Data Security,” Government Transformation Magazine, 2025, https://www.government-transformation.com/data/mod-strikes-400m-google-cloud-deal-to-strengthen-defence-and-data-security.
(You should verify author full name—“James” alone is incomplete for Chicago.)
[23] Lennart Strauss, “Securing the Defence Supply Chain: Advancing Threat Detection and Response across the MoD Ecosystem,” techUK, 2025, https://www.techuk.org/resource/securing-the-defence-supply-chain-advancing-threat-detection-and-response-across-the-mod-ecosystem.html.
[24] Reuters, “What Is Israel’s Secretive Cyber Warfare Unit 8200?” Reuters, September 18, 2024, https://www.reuters.com/world/middle-east/what-is-israels-secretive-cyber-warfare-unit-8200-2024-09-18/; Stefan Cordey, The Israeli Unit 8200: An OSINT-Based Study (Zurich: Center for Security Studies, ETH Zürich, 2019), 3–4, 8–9, 17.
[25] Cordey, Israeli Unit 8200, 3, 8–9.
[26] Reuters, “What Is Israel’s Secretive Cyber Warfare Unit 8200?”
[27] 8200 Cyber, “Israeli Cyber Unity 8200,” 2025, https://www.cyber8200.com/en/blog/israeli-cyber-unity-8200; Cordey, Israeli Unit 8200, 3–4, 14, 17.
[28] 8200 Cyber, “Israeli Cyber Unity 8200.”
[29] 8200 Cyber, “Israeli Cyber Unity 8200.”
[30] Horan, Romansky, and Ellison, Securing the Digital Backbone, 1, 5–6, 9–11.
[31] NATO Allied Command Transformation, “Empowering NATO Multi-Domain Operations through Digital Transformation”; NATO Allied Command Transformation, “Multi-Domain Operations and Digital Transformation.”
[32] Horan, Romansky, and Ellison, Securing the Digital Backbone, 6.
[33] NATO Allied Command Transformation, “Empowering NATO Multi-Domain Operations through Digital Transformation.”
[34] Horan, Romansky, and Ellison, Securing the Digital Backbone, 1, 5, 7.
[35] Grzegorzewski, Smith, and Koven, “Civil Cyber Defense,” 51–52, 55–56, 63.
[36] In the Estonian context, the Cyber Defence League operates as the volunteer cyber-defence component of the broader Estonian Defence League, within which the Cyber Defence Unit forms a militarily organised element focused on national cyber defence.
[37] Grzegorzewski, Smith, and Koven, “Civil Cyber Defense,” 51–52, 55, 57–60, 62.
[38] Grzegorzewski, Smith, and Koven, “Civil Cyber Defense,” 61.
[39] Horan, Romansky, and Ellison, Securing the Digital Backbone, 5, 9.
[40] NATO Allied Command Transformation, “Multi-Domain Operations and Digital Transformation”; Grzegorzewski, Smith, and Koven, “Civil Cyber Defense,” 56, 61.
[41] Grzegorzewski, Smith, and Koven, “Civil Cyber Defense,” 51.
[42] Horan, Romansky, and Ellison, Securing the Digital Backbone, 1.
