Chris Painter (@C_Painter) header
Chris Painter (@C_Painter) profile picture

Chris Painter

@C_Painter

Fmr President @theGFCE Foundation, Fmr top Cyber Diplomat, NSC Sr.D & fed pros w/30 yrs in cyber; film, wine & Indie fan. Commsnr @theGCSC; @CSIS @ChathamHouse

 Washington, DC
linkedin.com/in/christopher-painter-cyber
Joined July 2011
  • Tweets3.5K
  • Following293
  • Followers6.2K
353Media
Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)Photo by Chris Painter (@C_Painter)
And in that case, the U.S. and Russia (and to a lesser extent China) had some common self interest. With the current environment, there is little chance of any agreement to restrain capabilities — particularly for military applications.
James A. Lewis (@james_a_lewis) profile pictureJames A. Lewis@james_a_lewisSep 17
People talk about the need for #AI norms. It took 17 years to agree on cyber #norms in a less conflictual international environment where there was consensus among major powers and general agreement on what creates risk (which we do not have for AI). Don't hold your breath
1
1
274
I’m happy to join the faculty for this semester @SAISHopkins in Bologna Italy to teach a course on Diplomacy, National Security, Conflict and Competition in Cyberspace. A great cadre of students and wonderful faculty. And Bologna is amazing.
Image from Chris Painter (@C_Painter)
Image from Chris Painter (@C_Painter)
Image from Chris Painter (@C_Painter)
2
253
Happy to have been a special guest on this episode.
Center for Internet Security (CIS) (@CISecurity) profile pictureCenter for Internet Security (CIS)
@CISecurityAug 6
Cyber is part of a larger risk matrix that Boards are tracking. To get Boards to care about cyber risk, CISOs need to stop treating it as a boutique item and frame cyber risk in terms of financial risk. Listen to our podcast for further insights. bit.ly/4g0R2id

Episode 199: Translating Cyber Risk into Business Decisions

Translating cyber risk to Boards? Listen to learn how cyber risk quantification, risk modeling, and other recommendations can help.

cisecurity.org
1
1
233
Cyber is part of a larger risk matrix that Boards are tracking. To get Boards to care about cyber risk, CISOs need to stop treating it as a boutique item and frame cyber risk in terms of financial risk. Listen to our podcast for further insights. bit.ly/4g0R2id

Episode 199: Translating Cyber Risk into Business Decisions

Translating cyber risk to Boards? Listen to learn how cyber risk quantification, risk modeling, and other recommendations can help.

cisecurity.org
1
2
1
5
1,325
Dive into the latest episode of Cybersecurity Where You Are, where I joined in as a special guest to talk about how to translate cyber risk to the board. Check out @CISecurity's latest episode to learn more: cisecurity.org/insights/podc… #cyberrisk

Episode 199: Translating Cyber Risk into Business Decisions

Translating cyber risk to Boards? Listen to learn how cyber risk quantification, risk modeling, and other recommendations can help.

cisecurity.org
112
U.S. positions on cyber have so far been largely consistent with those articulated before 2025. The United States maintains its doctrinal positions while stepping back from its role of system steward, argue @patrykpawlak & @C_Painter. carnegieendowment.org/europe…
Resetting Cyber Relations with the United States

Resetting Cyber Relations with the United States

For years, the United States anchored global cyber diplomacy. As Washington rethinks its leadership role, the launch of the UN’s Cyber Global Mechanism may test how allies adjust their engagement.

carnegieendowment.org
1
3
3
596
U.S. skepticism of multilateral cooperation led to disengagement from institutions like the United Nations. These trends suggest a shift toward a more ideological and power-centric model of cyber governance, write @patrykpawlak & @C_Painter ⤵️ carnegieendowment.org/europe…
Resetting Cyber Relations with the United States

Resetting Cyber Relations with the United States

For years, the United States anchored global cyber diplomacy. As Washington rethinks its leadership role, the launch of the UN’s Cyber Global Mechanism may test how allies adjust their engagement.

carnegieendowment.org
3
4
557
The 2025 U.S. National Security Strategy reflects an instrumental view of multilateral institutions. This shift does not bode well for the new UN Global Mechanism to advance responsible state behavior in cyberspace, write @patrykpawlak & @C_Painter 👇 carnegieendowment.org/europe…
Resetting Cyber Relations with the United States

Resetting Cyber Relations with the United States

For years, the United States anchored global cyber diplomacy. As Washington rethinks its leadership role, the launch of the UN’s Cyber Global Mechanism may test how allies adjust their engagement.

carnegieendowment.org
4
4
531
Read his book The Cuckoo’s Egg or see the PBS documentary if you can find it. Great story
Helen (@anomalie_blue) profile pictureHelen
@anomalie_blueApr 4
Astronomer Cliff Stoll is dopamine personified. In 1986, he uncovered a 75-cent billing error that led to the discovery of a KGB-sponsored hacker named Markus Hess who was stealing U.S. military secrets. He now sells Klein bottles out of his basement in California.
1
399
Good article. The hack back discussion is like Groundhog Day—we have it again and again — but unlike Bill Murray’s character, we never learn and have the same debate each time. There is a lot the private sector can & should do short of this to disrupt incl working with the govt.
profdeibert (@RonDeibert) profile pictureprofdeibert@RonDeibertApr 1
The Trump administration has reportedly mooted the idea of authorizing private firms to undertake offensive cyber operations. I think that would be a very bad idea, and in my new essay for @lawfare i explain why 👇 lawfaremedia.org/article/the…
The Perils of Privatized Cyberwarfare

The Perils of Privatized Cyberwarfare

Privatized cyberwar will complicate oversight, create counterintelligence risks, fuel arms races and insecurity, and put civilians at risk.

lawfaremedia.org
1
2
705
We held the RSA International Cybersecurity Forum last Monday with 40 governments and they were missed — especially as the new US strategy had just come out. The US has always been an important participant and contributor and I hope they return next year.
Eric Geller (@ericgeller) profile pictureEric Geller@ericgellerMar 31
The cybersecurity community held one of its largest annual conferences last week. The U.S. government wasn't there, leaving many unanswered questions and simmering frustrations. My story about the impact of the Trump admin refusing to attend: cybersecuritydive.com/news/r…
Image from Eric Geller (@ericgeller)
Image from Eric Geller (@ericgeller)
Image from Eric Geller (@ericgeller)
Image from Eric Geller (@ericgeller)
138
🏆 At #RSAC this week, IST Chief Strategy Officer Megan Stifel, alongside Cyber Policy Awards Organizing Committee member Chris Painter and former National Cyber Director Chris Inglis, presented David Koh with the Cyber Policy Award™ for Lifetime Achievement.
Image from Institute for Security and Technology (@IST_org)
Image from Institute for Security and Technology (@IST_org)
1
1
3
170
Ex-cyber diplomat: State Dept.’s new Bureau of Emerging Threats may conflict with existing structure ow.ly/puMu106wrbx
3
1
4
871
Leaving SF after a packed few days at #RSAC, my observation: there is more demand for (and supply of) agents here than when I lived in LA.
Image from Chris Painter (@C_Painter)
2
102
This is a really strong and helpful report. Though I think there has always been a state component of ransomware, I agree it’s becoming more pronounced and this lays out great examples and differentiation of state actors.
Kaja (@KajaCiglic) profile pictureKaja@KajaCiglicMar 13
State-backed ransomware at the intersection of espionage, sabotage, and cybercrime bindinghook.com/state-backed…

State-backed ransomware at the intersection of espionage, sabotage, and cybercrime

The governments of Russia, China, Iran, and North Korea use ransomware for diverse ends.

bindinghook.com
2
320
The United States' retreat from UN cyber governance makes engagement more selective and transactional. The EU must step up in multilateral fora and deepen cyber coalitions with allies & partners, say @patrykpawlak & @C_Painter. Four possible scenarios: carnegieendowment.org/europe…
Image from Carnegie Europe (@Carnegie_Europe)
1
1
4
803
New speaker announcement! @C_Painter will provide a lecture on Ransomware at #SANCS26. The lecture will take place on March 17 from 16:00-17:00 CET / 17:00-18:00 SAST online on Microsoft Teams.
Image from Southern Africa-Netherlands Cyber Security School (@SANCS26)
Image from Southern Africa-Netherlands Cyber Security School (@SANCS26)
1
1
136
My great pleasure to engage in this discussion — and kudos to the moderator for great questions!
DFINITY Foundation (@dfinity) profile pictureDFINITY Foundation
@dfinityJan 20
How do we build power, policy, and tech for a stable cyberspace? ~ Cyber Diplomacy in an Era of Disruption: Power, Policy, and Technology ~ Inspiring dialogue with: @C_Painter of The Cyber Policy Group @TracyTrachsler of @dfinity (Moderator) #WorldComputerDay #Davos2026
Image from DFINITY Foundation (@dfinity)
1
130
The #CyberPolicyAwards organizing committee is pleased to announce the finalists in contention for the Atlas at the Third Annual Cyber Policy Awards™. After careful review of more than 85 submissions, the judges have selected 4 finalists per award category. 🏆 Learn more: securityandtechnology.org/bl…
Image from Institute for Security and Technology (@IST_org)
1
1
1
3
1,198
Posting a little late this year, though bought a while ago, the annual tree expedition where I get a 9+ ft tree strapped to the top of my convertible & hope it doesn’t rocket off while driving home, and the final product.
Image from Chris Painter (@C_Painter)
Image from Chris Painter (@C_Painter)
1
316
Load more