Cybersecurity threats, challenges, and strategies in humanitarian operations: A scoping review

Humanitarian organizations increasingly rely on digital tools and data with the promise of faster and more efficient aid delivery. But digitalization comes with a critical drawback: a heightened exposure to cyber threats. The data breach experienced by the International Committee of the Red Cross in 2022 is a clear example of this risk, but not an isolated one. The incidents recorded during the conflicts in Ukraine and Gaza show that cyberattacks against humanitarian organizations have become an alarming reality of modern conflict. A cyber incident on a humanitarian organization harms the protection of the identities and positions of vulnerable groups. There is therefore an urgent need to recognize cybersecurity as a core pillar of humanitarian aid. This PRISMA-ScR review maps cyber threats, challenges, and strategies in humanitarian aid. It identifies a range of cyber threats to humanitarian organizations, including cyberattacks, surveillance, and mis/disinformation concerns. Still, it reveals notable lacks in terms of cyber preparedness and response, as well as a complete absence of knowledge on crisis communication strategies. Despite the importance of strengthening cybersecurity being recognized, the findings highlight that humanitarian organizations face unique challenges which often hinder the effective implementation of cyber strategies. Given the identified gaps in both existing research and practice, this review stresses the importance of developing solutions tailored to the distinctive features and needs of the humanitarian sector. To this end, this study provides a base for further investigation, with the key themes, gaps, and proposed research avenues guiding immediate focus for this underexplored field. • Humanitarian organizations face growing cyber threats due to the digitalization of their operations. • Cyberattacks, surveillance, and mis/disinformation threaten humanitarian organizations. • Unique normative, operational, and resource constraints hinder effective cybersecurity implementation. • Humanitarian organizations show major gaps in cyber preparedness, response, and crisis communication. • Tailored cyber solutions are needed to address unique humanitarian challenges and needs.