Building Cyber Resilience: The Future of U.S.–ROK Cyber Cooperation

In this episode of Cache Me if You Can, we explore one of the most consequential cyber alliances in the Indo-Pacific: cooperation between the United States and the Republic of Korea. As cyber threats grow more sophisticated, from state-sponsored operations and ransomware to cryptocurrency theft and attacks on critical infrastructure, both countries are grappling with how to strengthen resilience and move beyond coordination toward deeper operational collaboration. Our guests, Dr. Jim Lewis of CSIS and researchers Sunha Bae and Joohui Park of South Korea's National Security Research Institute (NSR), draw on their expertise in cyber strategy, international law, and critical infrastructure security to examine the evolving threat landscape and the future of allied cyber cooperation. Together, they unpack how North Korea's cyber activities have evolved, the growing challenge of cryptocurrency-enabled illicit finance, and the role cyber operations play in Pyongyang's broader national strategy. We discuss South Korea's emerging approach to active cyber defense, lessons from U.S. concepts such as defend forward and persistent engagement, and the legal and policy considerations that accompany more proactive cyber operations. The conversation also explores how the U.S.–ROK alliance can operationalize cyber cooperation, coordinate responses to shared threats, and work with regional partners to build a more resilient and secure digital environment across the Indo-Pacific.