Russia's RuNet isolation could embolden its cyber operators abroad, an Atlantic Council brief argues
Atlantic Council issue brief argues Russia's push to isolate RuNet could make Kremlin cyber operations abroad more assertive. It says success is uncertain, so its five takeaways for US and European defenders are hypotheses to test.
The Watch · Security desk
Four groups. Kremlin: could feel insulated, resulting in more assertive cyber operations abroad. Non-state cyber proxies: could get increased Kremlin support. Cyber operations from Russia: technical methods could shift. Russian cyberspace: its cybersecurity may be undermined.
- decision Kremlin Isolation could raise its perceptions of insulation, resulting in more assertive cyber operations abroad, claim 11
- capability Non-state cyber proxies Isolation could prompt the Kremlin to selectively provide them increased support, claim 14
- constraint Cyber operations from Russia Isolation could shift the technical ways they must be conducted from within Russia, claim 12
- exposure Russian cyberspace The Kremlin's pursuits may undermine its cybersecurity, claim 15
| Who | How | Kind | Claim |
|---|---|---|---|
| Kremlin | Isolation could raise its perceptions of insulation, resulting in more assertive cyber operations abroad | decision | 11 |
| Non-state cyber proxies | Isolation could prompt the Kremlin to selectively provide them increased support | capability | 14 |
| Cyber operations from Russia | Isolation could shift the technical ways they must be conducted from within Russia | constraint | 12 |
| Russian cyberspace | The Kremlin's pursuits may undermine its cybersecurity | exposure | 15 |
What happened
- The brief says the Kremlin is going deeper than most states, building a domestic DNS and removing Western hardware and software from Russia's internet infrastructure.
- It also says isolation could lead the Kremlin to provide selective, increased support to non-state cyber proxies.
- A fifth takeaway is that the Kremlin's pursuits may undermine the cybersecurity of Russian cyberspace itself.
- The brief says Kremlin perceptions of an information onslaught from the West drive top-level attention to isolation.
Why it matters
- exposure Any threat model that assumes how Russian state-linked operators reach foreign targets from inside Russia depends on a network layout the brief says may change.
- decision Planners must decide whether to treat Kremlin perceived insulation as a variable, since the brief's forecast of bolder operations hangs on perception.
- contradiction The brief's takeaways pull in two directions: a Kremlin that feels insulated and acts more boldly, and Russian networks that may end up less secure.
The law is the one dated, public step. It was signed on May 1, 2019 and took effect on November 1, 2019, 184 days later [2][10]. The brief says the government has pushed more aggressively in recent years to technically isolate the internet inside Russia [1], so the law is one step in a longer program. Every claim the brief makes about changed Kremlin cyber behavior is a forecast, and it words each one with "could" or "may" [11][14][15].
Cost decides how far this goes. The brief's first takeaway is that the state's political willingness to push isolation costs onto companies and citizens is an open question [6]. Definitions matter too. The brief says "RuNet" has been used for several different technical definitions of the Russian internet [9], so a claim that Russia has isolated it depends on which definition is meant.
The weakening forecast has a stated cause. The brief links it to a broader, regime-security-focused notion of "information security" online [16]. It says that approach diverges from the more-studied model in China, and that US and European policy makers need to understand RuNet developments better [8].
The text of the brief reviewed here does not list which hardware or software is being removed, or how much of the domestic DNS is in service. Until that detail is public, we'd treat the five takeaways as assumptions to check against observed changes in Russian infrastructure.
What to watch
- Whether Russia finishes its domestic DNS and replaces Western hardware and software, since the brief names technical factors as the main obstacle.
- Whether the state pushes isolation costs onto companies and citizens, the brief's first open question.
- Any observed change in the infrastructure Russian state-linked operators use, or in support to non-state proxies, that would test the brief's forecasts.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence40
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
The Russian government has more aggressively pushed in recent years to technically isolate the internet within Russia from the rest of the world.
- [2]
The domestic internet law focused on RuNet isolation was signed on May 1, 2019 and entered into effect on November 1, 2019.
- [3]
The brief says the Kremlin is pursuing internet isolation at a deeper level than many other countries have to date, including through development of a domestic Domain Name System (DNS) and the uprooting of Western hardware and software from Russia's internet infrastructure.
- [4]
The brief says it remains to be seen how successful the government will be in achieving isolation, due to a combination of political and especially technical factors.
- [5]
The brief says the pursuit of a domestic internet may shift the layout of internet infrastructure in Russia and the state's control over it.
- [6]
The brief's first takeaway is that the state's political willingness to push internet isolation costs on companies and citizens is an open question.
- [7]
The brief's second takeaway is that Kremlin perceptions of an information onslaught from the West drive top-level attention to internet isolation.
- [8]
The brief says the Russian approach to internet restriction and isolation notably diverges from the more-studied model in China, meaning policy makers in the United States and Europe need to better understand recent RuNet developments.
- [9]
The brief says 'RuNet' has been used in reference to several different technical definitions of the 'Russian internet.'
- [10]
The law took effect 184 days after it was signed.
- [11]
The brief's third takeaway is that RuNet isolation could increase Kremlin perceptions of insulation from foreign cyber threats, resulting in more assertive cyber operations abroad.
- [12]
The brief says the pursuit of internet isolation could shift the technical ways in which cyber operations must be conducted from within Russia.
- [13]
The brief says the Russian government already makes heavy use of cyber and information operations against foreign targets around the world.
- [14]
The brief's fourth takeaway is that isolation could prompt the Kremlin to selectively provide increased support to non-state cyber proxies.
- [15]
The brief's fifth takeaway is that the Kremlin's pursuits may undermine the cybersecurity of Russian cyberspace itself.
- [16]
The brief says the Kremlin's pursuit may undermine the cybersecurity of Russian cyberspace in the continued pursuit of a broader, regime-security-focused notion of 'information security' online.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
1 independent publisher whose own reporting we read for this story.
- One explicit goal
atlanticcouncil.org
1 article · October 14, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.