Brazil’s cyber defence apparatus: between strategic statecraft and structural challenges

Introduction Brazil has experienced a significant shift in its approach to cyber defence and security. This manuscript analyses Brazil’s cyber statecraft, specifically its defensive aspects. Therefore, it aims to answer the question: how is cyber defence evolving in Brazil? This article examines Brazil’s approach to cyber defence from 2005 until 2025. Methods The study employs a comprehensive analysis of the country’s normative and bureaucratic structures through a thorough data collection and triangulation process, which included the analysis of a broad array of national and internal norms, two official visits to the Cyber Defence Command (ComDCiber), four participant observations at the Cyber Guardian Exercise (EGC) and two interviews with key actors of Brazil’s cyber statecraft. Results The findings suggest that Brazil’s cyber defence has evolved through a gradual and incremental process. This evolution is reflected in the progressive development of bureaucratic structures, the expansion and adaptation of normative frameworks, and increasing – though uneven – coordination between cyber defence and broader cybersecurity governance. Discussion Brazil’s trajectory indicates a steady but heterogeneous pattern of institutional consolidation, shaped by domestic political and strategic dynamics as well as by the interplay between military and civilian cybersecurity agendas. The article contributes to understanding how emerging powers develop cyber defence capabilities through incremental statecraft rather than rapid transformation.