When do cyberattacks deserve a response from NATO?

What kind of cyberattack would trigger a response from NATO?

That question, on so called Article 5 intrusions, has intrigued cybersecurity experts since the organization declared cyberspace a domain of warfare in 2016. But a more immediate question may be how NATO and its member nations confront the daily cyber events that never rise to the threshold of armed attacks.

“I actually don’t think that the biggest problem is when Article 5 is triggered or not … It is all the activity that is taking place the threshold of armed attack yet is still strategically meaningful,” Max Smeets, senior researcher at ETH Zurich Center for Security Studies, said Dec. 3 at the NATO Engages think tank event in London. “That is something that NATO is grappling with today and how to respond to that.”