NATO Allies Pledge 1.5% Of GDP To Boost Cybersecurity & Protect Critical Infrastructure

On 25 June 2025, NATO leaders, gathered at the annual summit in The Hague, agreed to a landmark defence spending target of 5% of GDP by 2035, with 1.5% earmarked specifically for cybersecurity and critical national infrastructure protection.

This decision, driven by mounting geopolitical tensions and the growing sophistication of cyber threats, marks a significant shift in how the alliance defines defence expenditure.

The move responds to persistent calls from US President Donald Trump for European allies to shoulder more of the collective security burden, while addressing urgent vulnerabilities in digital and physical infrastructure.

Responding To Contested Cyberspace

The 1.5% allocation, detailed in NATO’s new spending framework, will fund cybersecurity, border and coastal security, and infrastructure upgrades such as roads and bridges capable of supporting military convoys. A Bloomberg report from May 2025 noted that NATO proposed including these expenditures to meet the alliance’s ambitious 5% GDP target, with 3.5% allocated to “hard defence” like troops and weapons.

The decision reflects the alliance’s recognition of cyberspace as a contested domain, with daily malicious cyber events ranging from low-level attacks to sophisticated campaigns targeting critical systems.

Russia’s ongoing war in Ukraine and China’s hybrid cyber operations have underscored the need for robust defences, as highlighted in NATO’s 2024 cyber defence policy update.

Economic & Strategic Implications

The commitment to 1.5% of GDP for infrastructure and cybersecurity is poised to transform the global cybersecurity market. A data visualisation from Ainvest projects that NATO-related spending could drive 40% of the sector’s growth, with annual cybersecurity expenditures potentially surpassing $500 billion by 2032.

This surge will benefit firms specialising in threat detection, encryption, and infrastructure protection, such as Palo Alto Networks and CrowdStrike. However, the financial strain is significant. European allies and Canada, who increased defence spending from 1.43% of GDP in 2014 to 2.02% in 2024, face challenges in meeting the new target, particularly southern members like Spain, which secured flexibility to spend only 2.1% on core defence.

Challenges & Dissent

Spain’s reluctance to fully commit to the 5% target, as reported by Reuters, highlights tensions within the alliance. Prime Minister Pedro Sánchez argued that 2.1% of GDP suffices to meet NATO’s capability targets, a stance that drew criticism from US officials and NATO Secretary-General Mark Rutte, who insisted Spain must align with the 3.5% core defence goal. Despite these challenges, countries like Norway and Poland are already on track to meet or exceed the 5% target, driven by proximity to Russia and heightened security concerns.

A Step Toward Resilience

The pledge, set for review in 2029, requires allies to submit annual plans to ensure incremental progress. As NATO Secretary-General Mark Rutte warned, Russia could pose a military threat to the alliance within five years, making investments in cybersecurity and infrastructure critical.

In expert comment, Jamie Moles, Senior Technical Manager at ExtraHop said. "NATO’s allocation to protect critical infrastructure and bolster cyber resilience signals the notable link between cybersecurity and national security on the world stage. However, the real impact will come from how these funds are deployed...

With state-sponsored cyber attacks increasing in frequency and sophistication, investing in network visibility that detects threats before a major incident occurs is more essential than ever. Equally important is building resilience, not just preventing attacks, but minimizing complexity to ensure critical systems can recover quickly without disruption." Moles concluded.

This commitment signals NATO’s resolve to adapt to 21st-century threats, balancing traditional defence with digital resilience to safeguard the Euro-Atlantic area.

Bloomberg  |   Politico   |    Euronews   |  @CGTN  |   CNBC   |   NATO  

Image: Marek Studzinski

You Might Also Read:

The UK’s Defence Shift & The Urgency Of Sovereign Digital Infrastructure:


If you like this website and use the comprehensive 8,00-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Healthcare Under (Cyber) Attack: What You Need to Know

CyberSecurity Jobsite
Check Point

Directory of Suppliers

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Cambray Solutions

Cambray Solutions

Cambray Solutions specializes in locating and securing technical professionals, managers, and executives.

Haltdos

Haltdos

Haltdos is an AI driven website protection service that secures websites against today's cyber threats.

Nexcom International

Nexcom International

Nexcom operates six global businesses - IoT Automation, Intelligent Digital Security, Internet of Things, Intelligent Platform & Services, Mobile Computing Solutions, Network & Communications.

vdiscovery

vdiscovery

vdiscovery is a provider of proprietary and best-in-breed solutions in computer forensics, document review, and electronic discovery.

Cycura

Cycura

Cycura provide advanced, customized, and confidential cyber security services, cyber investigation services, and digital forensic services to governments, companies, and organizations.

AlAnsari Technical Solutions (ATS)

AlAnsari Technical Solutions (ATS)

ATS is a Kuwait based company specialised in delivering hardware/software, Virtualisation, IP Telephony / Unified Communication, Networking and professional IT services and solutions.

Chronicle

Chronicle

Chronicle products combine intelligence about global threats in the wild, threats inside your network, and unique signals about both.

Featurespace

Featurespace

Featurespace is a world-leader in Adaptive Behavioural Analytics and creator of the ARIC platform for fraud and risk management.

Estio Training

Estio Training

Estio Training is a specialist digital and IT apprenticeships provider, dedicated to introducing new skills and developing existing talent in businesses across the UK.

SearchInform

SearchInform

SearchInform is a leading risk management product developer, protecting business and government institutions against data theft, harmful human behavior, compliance breaches and incomplete audit.

xMatters

xMatters

xMatters is a digital service availability platform that helps enterprises prevent, manage, and resolve IT incidents before they can become business problems.

Managed IT Services

Managed IT Services

Managed IT Services is a managed IT Services Company offering a diverse range of Cyber Security services and IT solutions.

CV-Library

CV-Library

Start your job search with 216,931 live UK vacancies on award-winning CV-Library. Register your CV and find local jobs near you today!

KCS Group Europe

KCS Group Europe

KCS Group helps its clients to identify and deal with any risks, weaknesses and threats which could impact on the business financially or reputationally.

Panoplia Digital Protection

Panoplia Digital Protection

Panoplia Digital Protection is a cutting-edge cybersecurity company that leverages the power of AI and ML to help businesses and consumers protect themselves against cyber threats.

Quotient

Quotient

Quotient builds digital experiences that empower and inspire the American people by understanding their needs, simplifying complex technical solutions and adapting to how they work, live and learn.