This article adopts a constructive approach to examining the problem of the Indo-Pacific construct. Through reflection on the east Asian experience, it proposes an analytical framework of developmental peace as a constellation of international practices, which means that the more economic development is prioritized by states in regional processes, the more likely it is that a sustainable peace will be achieved. States participating in regional integration comprise a community of practice. On the basis of a shared understanding that development is of overriding importance and underpins security and state legitimacy, the community takes economic development as the anchoring practice; this practice embodies and enacts constitutive rules and fundamental norms for a broader set of practices in regional processes, such as peaceful coexistence and non-interference. The more economic development is prioritized on domestic and regional agendas, the more likely it is that conflicts in the security realm will be relaxed or even resolved to protect security interests. The author draws some useful implications from the developmental peace in east Asia for the Indo-Pacific construct, among which the most important include building shared understandings on the prioritization of economic development, taking advantage of the Regional Comprehensive Economic Partnership (RCEP), Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP) and the Asian Infrastructure Investment Bank, and using the code of conduct process as a vehicle and best practice to facilitate rule-making for the maritime order. Finally, the author briefly discusses the contributions of the study and limitations of the model.

The World Health Organization, US Department of Health and Human Services, and hospitals in Spain, France and the Czech Republic have all suffered cyberattacks during the ongoing COVID-19 crisis.

In the Czech Republic, a successful attack targeted a hospital with one of the country’s biggest COVID-19 testing laboratories, forcing its entire IT network to shut down, urgent surgical operations to be rescheduled, and patients to be moved to nearby hospitals. The attack also delayed dozens of COVID-19 test results and affected the hospital’s data transfer and storage, affecting the healthcare the hospital could provide.

In the UK, the National Health Service (NHS) is already in crisis mode, focused on providing beds and ventilators to respond to one of the largest peacetime threats ever faced. But supporting the health sector goes beyond increasing human resources and equipment capacity.

Health services ill-prepared

Cybersecurity support, both at organizational and individual level, is critical so health professionals can carry on saving lives, safely and securely. Yet this support is currently missing and the health services may be ill-prepared to deal with the aftermath of potential cyberattacks.

When the NHS was hit by the Wannacry ransomware attack in 2017 - one of the largest cyberattacks the UK has witnessed to date – it caused massive disruption, with at least 80 of the 236 trusts across England affected and thousands of appointments and operations cancelled. Fortunately, a ‘kill-switch’ activated by a cybersecurity researcher quickly brought it to a halt.

But the UK’s National Cyber Security Centre (NCSC), has been warning for some time against a cyber attack targeting national critical infrastructure sectors, including the health sector. A similar attack, known as category one (C1) attack, could cripple the UK with devastating consequences. It could happen and we should be prepared.

Although the NHS has taken measures since Wannacry to improve cybersecurity, its enormous IT networks, legacy equipment and the overlap between the operational and information technology (OT/IT) does mean mitigating current potential threats are beyond its ability.

And the threats have radically increased. More NHS staff with access to critical systems and patient health records are increasingly working remotely. The NHS has also extended its physical presence with new premises, such as the Nightingale hospital, potentially the largest temporary hospital in the world.

Radical change frequently means proper cybersecurity protocols are not put in place. Even existing cybersecurity processes had to be side-stepped because of the outbreak, such as the decision by NHS Digital to delay its annual cybersecurity audit until September. During this audit, health and care organizations submit data security and protection toolkits to regulators setting out their cybersecurity and cyber resilience levels.

The decision to delay was made to allow the NHS organizations to focus capacity on responding to COVID-19, but cybersecurity was highlighted as a high risk, and the importance of NHS and Social Care remaining resilient to cyberattacks was stressed.

The NHS is stretched to breaking point. Expecting it to be on top of its cybersecurity during these exceptionally challenging times is unrealistic, and could actually add to the existing risk.

Now is the time where new partnerships and support models should be emerging to support the NHS and help build its resilience. Now is the time where innovative public-private partnerships on cybersecurity should be formed.

Similar to the economic package from the UK chancellor and innovative thinking on ventilator production, the government should oversee a scheme calling on the large cybersecurity capacity within the private sector to step in and assist the NHS. This support can be delivered in many different ways, but it must be mobilized swiftly.

The NCSC for instance has led the formation of the Cyber Security Information Sharing Partnership (CiSP)— a joint industry and UK government initiative to exchange cyber threat information confidentially in real time with the aim of reducing the impact of cyberattacks on UK businesses.

CiSP comprises organizations vetted by NCSC which go through a membership process before being able to join. These members could conduct cybersecurity assessment and penetration testing for NHS organizations, retrospectively assisting in implementing key security controls which may have been overlooked.

They can also help by making sure NHS remote access systems are fully patched and advising on sensible security systems and approved solutions. They can identify critical OT and legacy systems and advise on their security.

The NCSC should continue working with the NHS to enhance provision of public comprehensive guidance on cyber defence and response to potential attack. This would show they are on top of the situation, projecting confidence and reassurance.

It is often said in every crisis lies an opportunity. This is an opportunity for the UK government to show agility in how it deals with cyber threats and how it cooperates with the private sector in creating cyber resilience.

It is an opportunity to lead a much-needed cultural change showing cybersecurity should never be an afterthought.

The liberal international order (LIO) is in crisis. Numerous publications, debates and events have time and again made it clear that we are in the midst of a grand transformation of world order. While most contributions focus on either what is slowly dying (the LIO) or what might come next (China, multipolarity, chaos?), there is less analytical engagement with what lies in between those two phases of world order. Under the assumption that this period could last years or even decades, a set of analytical tools to understand this interregnum is urgently needed. This article proposes an analytical framework that builds on Gramscian concepts of crisis that will help us understand the current crisis of the LIO in a more systematic way. It addresses a gap in the literature on changing world order by elaborating three Gramsci-inspired crisis characteristics—processuality, organicity and morbidity—that sketch the current crisis landscape in a systematic way. Building on this framework, the article suggests different empirical entry points to the study of the crisis of the LIO and calls for a research agenda that takes this crisis seriously as a distinct period of changing world orders.

The liberal international order (LIO) is in crisis. Numerous publications, debates and events have time and again made it clear that we are in the midst of a grand transformation of world order. While most contributions focus on either what is slowly dying (the LIO) or what might come next (China, multipolarity, chaos?), there is less analytical engagement with what lies in between those two phases of world order. Under the assumption that this period could last years or even decades, a set of analytical tools to understand this interregnum is urgently needed. This article proposes an analytical framework that builds on Gramscian concepts of crisis that will help us understand the current crisis of the LIO in a more systematic way. It addresses a gap in the literature on changing world order by elaborating three Gramsci-inspired crisis characteristics—processuality, organicity and morbidity—that sketch the current crisis landscape in a systematic way. Building on this framework, the article suggests different empirical entry points to the study of the crisis of the LIO and calls for a research agenda that takes this crisis seriously as a distinct period of changing world orders.

Until fairly recently, consideration of religion has been marginal or even non-existent in the scholarly discourse about environmental politics. Renewed attention to the intersection of these fields has been encouraged by a recent widening in discussions of ‘environmental values’ to include the role of religious institutions and personal belief in forming spiritual environmental values and renewed attention to the place of ethics and religious institutions in global environmental politics. Following a range of historic declarations by religious leaders, the recent encyclical by Pope Francis signalled a new level of integration between Catholic concerns for social and environmental justice. Yet, much of the continued engagement by large environmental NGOs and governments has continued to ignore the complex interrelation of local, intermediate and transnational religious political ecology. In this article, which is based on data gathered during five years of fieldwork, primarily with British Christian REMOs (religious environmental movement organizations), I probe the complexities of political engagement with religious environmentalism which arise from the many different organizational iterations these groups may take. On the basis of such investigation I suggest that effective high-level engagement with REMO groups will be greatly enhanced by a nuanced understanding of the many different shapes that these groups can take, the various scales at which these groups organize, and the unique inflection that political action and group identity can take in a religious context.

This article adopts a constructive approach to examining the problem of the Indo-Pacific construct. Through reflection on the east Asian experience, it proposes an analytical framework of developmental peace as a constellation of international practices, which means that the more economic development is prioritized by states in regional processes, the more likely it is that a sustainable peace will be achieved. States participating in regional integration comprise a community of practice. On the basis of a shared understanding that development is of overriding importance and underpins security and state legitimacy, the community takes economic development as the anchoring practice; this practice embodies and enacts constitutive rules and fundamental norms for a broader set of practices in regional processes, such as peaceful coexistence and non-interference. The more economic development is prioritized on domestic and regional agendas, the more likely it is that conflicts in the security realm will be relaxed or even resolved to protect security interests. The author draws some useful implications from the developmental peace in east Asia for the Indo-Pacific construct, among which the most important include building shared understandings on the prioritization of economic development, taking advantage of the Regional Comprehensive Economic Partnership (RCEP), Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP) and the Asian Infrastructure Investment Bank, and using the code of conduct process as a vehicle and best practice to facilitate rule-making for the maritime order. Finally, the author briefly discusses the contributions of the study and limitations of the model.

Asia’s political class learnt many lessons on digital governance in 2019, not all of them positive.

The prolonged protests in Hong Kong and India, led by disaffected young citizenry and enabled by social media tools, powerfully demonstrated how things could spiral out of control when the virtual and the real streets come together.

Not surprisingly, governments across the region are taking a step back. Instead of placing the citizen at the heart of digital public policy – with privacy, trust, security and inclusion as drivers of digital governance – Asian governments are focusing instead on surveillance and command and control, which contradicts the spirit of a decentralized Internet and undermines citizen’s rights.

Asia’s digital governance is fragmenting from the global norm and morphing into two platforms with remarkably similar characteristics.

One is a China-driven model aptly called the Great Firewall where surveillance of citizens is an explicit objective and any external material deemed to be subversive is kept out. A complementary model has also emerged more recently, which can best be described as China-light, which seeks to emulate the control aspects of the Great Firewall.

There are of course overlaps between emulators of the China model (this list includes Vietnam, Myanmar, Cambodia and Laos) and those pursuing China-light (Singapore, India, Indonesia, Bangladesh, Sri Lanka, the Philippines, Thailand and Malaysia). A common thread running through these two approaches, which differ only in intensity and scope, is the belief that the state is best positioned to police social media and protect the rights of citizens.

This was not how it was supposed to be. A decade ago, Asian political leaders spoke about the virtues of an open internet. Such talk has faded, and a narrowing of Asia’s digital space is taking place against a backdrop of an intensifying trade war between America and China, where regional supply chains run the risk of a decoupling into distinct Sino and American spheres, upending Asia’s durable economic model of the past few decades.

Digital fragmentation in the world’s fastest growing region, with five G20 members, will complicate efforts to build global governance and standards.

Asia’s digital landscape

Asian governments, including democratic ones, have developed an unhealthy obsession with what their citizens are up to on a daily basis. Their solution is round-the-clock monitoring in cities and towns, powered by new surveillance technologies.

Name tagging and facial recognition to track movement of citizens has become pervasive across the region, with China emerging as the preferred source of technology, knowledge, and techniques. While India’s Supreme Court has ruled that privacy is a fundamental right, translating this into concrete citizen’s protections will be difficult with the Modi government eager to emulate China’s approach.

Asian governments are also following China in requiring that their citizen’s data be housed within national borders and are rebelling against the established practice of data offshoring.

In the post-Snowden era and amidst increasing cyber risks, there are rational national security reasons for why governments may want to ring-fence customer data within national boundaries. However, Asian governments are paying little or no attention to how companies are using customer data within national boundaries, with widespread abuses going unchecked.

Global standards are still evolving and there is a strong case here for a uniform regional approach, perhaps via ASEAN or APEC, on standards governing customer privacy, payments, data collection and handling. Big tech companies and platforms operate across much of Asia and a regional approach will curb their current instinct of conducting regulatory arbitrage.

There is a genuine problem in Asia, as elsewhere in the world, with the proliferation of fake news and extremism. But instead of addressing the source of this problem, governments are clamping down by generously expanding the definition of fake news (Singapore) or by shutting down the internet altogether (India, Sri Lanka, and China being serial offenders).

As disseminators of news of all stripes, including the fake variant, the big tech firms have a primary responsibility in policing their platforms. However, the regulatory capacity of many Asian governments to monitor this is weak and in crisis situations, governments prefer to shut the pipes altogether.

Digitalization of course is not all about surveillance and holds the promise of driving inclusion. There is considerable hype within Asia on the promise of fintech as an enabler of this inclusion.

Hong Kong and Singapore are licensing new digital banks, India’s UPI (unified payments interface) is reducing friction in domestic payments and China’s BAT companies (Baidu, Alibaba, Tencent) are disrupting traditional commerce and payments, and seeking to expand in the region.

However, there is an elite focus in many of these initiatives, with the target market being the region’s rising middle class rather than those at the bottom of the income ladder. Making fintech work for all will require micro-initiatives with the support of NGOs, local governments and small enterprises, with the objective of digitalizing microfinance.

Here developing Asia will again benefit from learning from each other and in building regional approaches. India’s Aadhar for example, with appropriate security safeguards, is a model for Asia in terms of building digital identity.

Given differing regional and national objectives, it is difficult to imagine a global accord for digital governance any time soon. However, by signing on to the Regional Comprehensive Economic Partnership (RCEP) and the Comprehensive and Progressive Agreement for Transpacific Partnership (CPTPP, the successor to the TPP), Asia has consistently demonstrated its leadership in trade and regional governance.

This is why the region needs to come together to ensure that the promise and potential of digitalization flows evenly and equitably to the region, with the region’s 3.8 billion citizens at the heart, rather than at the margins of sensible public policy.

Internet shutdowns in Asia have become frequent and persistent, an ominous sign of shrinking public space for debate and discourse. The shutdowns have become an irresistible option for governments of all stripes and ideological affiliations. Democratic India, Sri Lanka, Indonesia and the Philippines are prodigious offenders. So are Asia’s more repressive regimes, notably China.

In their defence, governments have offered real and imagined threats to national security as reasons for shutting down the pipes. It is useful to examine these claims as well as to objectively frame the issue. Are internet shutdowns in Asia legitimate and can be defended and explained as threats to national security? Or should we take a broader approach where international law, norms, values, rights and indeed economic stability could be invoked to curb this invidious practice?

Let’s start with the shutdown in Kashmir, where Indian authorities clamped down on internet access for a straight 165 days, described by rights group Access Now as the ‘longest shutdown ever in a democracy’. The Kashmir Chamber of Commerce and Industry estimates that the shutdown had huge economic costs, estimated at over £1.9 billion.

The economic cost of the continuing surveillance and shutdown in China’s Xinjiang province is likely to be higher. But India is a democracy and could be a role model, which is why the recent assertion of Communications and Information Technology Minister Ravishankar Prasad is worrying. He asserted in Parliament that the Indian citizen’s right to the internet was not a fundamental right. ‘While right of internet is important, security of the country is equally important…Can we deny (that) the internet is abused by terrorists…?’.

The minister’s primary defence of the shutdown – that the internet was being abused by terrorists and others to foment unrest – has some merit. Our starting point therefore is that big tech platforms should be doing a significantly better job in monitoring content and in removing material designed to provoke violence and hatred. This is the original sin and Asian governments are right to worry about messaging platforms, for example, becoming preferred channels for venom and hate speech.

To date, the big tech firms have made the right noises about monitoring and moderating content, but they have not gone far enough, providing governments with the excuse to routinely shut down access. To be blunt, self-regulation of the platforms is not working and tougher global regulation, enforcement and sanctions, possibly via the G20, would help.

At the same time, better policing of the platforms will not resolve the issue entirely because governments regard internet shutdowns as a useful way to restrict human rights and to consolidate political control and surveillance over citizens. The international community – including nation-states, NGOs and the private sector – needs to come together and embrace two overarching principles:

First, digital access is a fundamental human right and integrated into global declarations and norms.

Second, to protect fragmentation and Balkanization of the internet, the digital pipes which carry data across national boundaries should be embedded into international law as being part of the global commons (just like oceans are under maritime law). This would raise the bar on countries which frequently restrict digital access to their citizens.

Sensible though these recommendations might seem, it is obvious that many Asian governments would be loath to sign up to global declarations which would limit their policy options at home. There is an economic dimension to internet shutdowns, as the Kashmir case makes clear, which could be addressed by naming and shaming, just as the OECD’s Financial Action Task Force does for countries falling foul of money laundering regulations. Recommendations include:

• Digital access should be included in the UN’s Human Development Index.
• The World Bank’s closely followed Doing Business Index (DBI) should score countries favourably based on their commitment to offering unimpeded access to the internet. China and India watch the DBI rankings very closely and will be forced to pursue a more liberal approach if their rankings fall precipitously.
• Since internet shutdowns have a clear economic cost, particularly in payments and financial services, the International Monetary Fund (IMF) should make an annual determination of member countries (as part of its surveillance mandate) of the impact of shutdowns on economic activity and financial stability.

Finally, all Asian governments have declared a public commitment to drive financial inclusion by providing digital access and identity to the poor and vulnerable. This mandate is at odds with frequent internet disruptions. A small vendor in Kashmir, Xinjiang or elsewhere in the region has limited or no recourse when the pipes are shut down. Central banks in the region need to step in by offering some level of protection, just like deposit insurance coverage.

It is clear that many of these recommendations would be rejected outright by many Asian governments. They regard internet shutdowns as part of their policy toolkit to deal with external and internal threats to national security. In pursuing such a rigid approach, governments are wilfully curbing their citizens’ space for debate and ignoring a much broader issue of rights to digital access.

Armed with a hammer, it is tempting for governments to regard the internet as a nail. The international community and citizens’ groups have an obligation to make such hammering very expensive.