The framework plans for the development of a long-range offensive component for deterrence and broadens the definition of an "armed attack" to include coordinated acts of sabotage. Critical infrastructure operators are required to report cyberattacks within 24 hours under the new guidelines. This strategy follows a government consultation process from December 2025 to March 2026, driven by Russia's expanding war economy and a reduced reliance on U.S. security support.
