CYBER SECURITY THREATS AND INSTITUTIONAL RESILIENCE IN THE UNITED NATIONS SYSTEM, 2016–2025

Abstract

This study examined cyber security threats and institutional resilience in the United Nations system from 2016 to 2025. The objectives of the study were to examine the nature of cybersecurity threats confronting the United Nations system between 2016 and 2025; assess the institutional resilience measures and cybersecurity governance initiatives adopted by the United Nations system in response to cybersecurity threats during the same period; and evaluate variations in cybersecurity threats and institutional resilience across humanitarian operations, peacekeeping operations, health and medical agencies, administrative and financial systems, and field missions within the United Nations system in 2025. The study adopted Institutional Resilience Theory as its theoretical framework and utilized a descriptive research design based on secondary sources of data. Data were obtained from United Nations Office of Information and Communications Technology (OICT) reports, United Nations cybersecurity reports, Open-Ended Working Group (OEWG) reports, global cybercrime statistics, journal articles, and other relevant institutional publications. The data collected were descriptively analysed using tables and trend analysis. The findings of the study revealed that cyber security threats increased significantly between 2016 and 2025, with cybercrime costs rising globally alongside growing incidents of ransomware attacks, phishing, cyber espionage, and attacks on critical digital infrastructure. The study concluded that although the United Nations system made substantial progress in strengthening institutional resilience against cyber threats, significant vulnerabilities still exist in humanitarian operations, peacekeeping missions, and field operations due to infrastructural and operational challenges. The study therefore recommended strengthening cybersecurity governance frameworks and investing in appropriate cybersecurity technologies; expanding staff training, capacity building, incident response, disaster recovery, and business continuity mechanisms; and adopting coordinated cybersecurity assessments, information-sharing arrangements, common security standards, and targeted support to address variations in cybersecurity threats and institutional resilience across the different operational areas of the United Nations system.