Critical vulnerability in has moved to the centre of the policy debate. Interviews with security officials suggest a growing recognition that deterrence must be paired with resilience. Hardening critical infrastructure, rehearsing crisis responses and communicating clearly with the public are no longer optional extras.

At the international level, the picture is mixed. While multilateral forums have produced statements of shared concern, concrete commitments — on funding, on verification, on enforcement — remain thin.

Regional implications

Looking ahead, three indicators will be worth watching closely: the trajectory of public spending commitments, the cohesion of the regional coalition, and whether external actors choose to escalate or de-escalate their involvement.

Technology is both part of the problem and part of the solution. The same digital tools that enable faster coordination also create new vulnerabilities, from data leaks to targeted disinformation campaigns that exploit existing social divisions.

Every major shock of the last decade was foreseeable. Very few were prepared for.

Critics argue that the current approach treats symptoms rather than causes. In interviews with more than two dozen practitioners, a recurring theme emerged: coordination between agencies remains weak, and information is still shared on a case-by-case basis rather than systematically. This is where questions of critical vulnerability in become most acute.

What the data shows

Not everyone shares this assessment. Some analysts contend that the risks have been overstated and that markets have already priced in most of the downside. The evidence for this more optimistic view is real, but it rests on assumptions about stability that recent events have repeatedly challenged.

  • Short term: contain immediate risks and protect the most exposed groups.
  • Medium term: strengthen coordination and information-sharing between agencies.
  • Long term: invest in resilience, diversification and institutional capacity.

Ultimately, the question is not whether the system will be tested again, but how prepared it will be when that happens. On current evidence, the answer is: better than before, but not yet good enough.

The economic stakes are considerable. Conservative estimates suggest that disruption on this scale could shave between 0.3 and 0.7 percentage points off regional growth next year, with the heaviest burden falling on import-dependent economies and low-income households.

The bigger picture

Officials familiar with the discussions describe a process that has moved faster than many observers expected, driven less by diplomatic breakthroughs than by mounting domestic pressure in several key capitals. The result is a fragile consensus that could unravel if economic conditions deteriorate further.

The private sector has emerged as an unexpectedly important actor. Companies with global footprints increasingly find themselves making decisions with geopolitical consequences, often without clear guidance from governments.

Lessons from history

The legal framework has struggled to keep pace. Existing rules were designed for a different era and leave significant grey areas, particularly where state and non-state actors operate in the same space or where activity crosses multiple jurisdictions.

For policymakers, the challenge is one of sequencing. Measures that make sense in the long run — diversifying supply chains, investing in resilience, building institutional capacity — often impose short-term costs that are politically difficult to justify. For more context, see our research library.