Jessica West

This case examines persistent disruption of Global Navigation Satellite Systems (GNSS) affecting northern Norway and the broader Arctic region. What began as episodic concern during a major NATO exercise in 2018 evolved into a recurring operational problem, intensifying after Russia’s 2022 invasion of Ukraine and increasingly affecting civilian aviation, maritime navigation and emergency services. By 2025, suspected spoofing incidents had added a new layer of risk by introducing misleading positioning data rather than simple signal loss.

Abbas Yazdinejad

This case presents a decision-forcing dilemma within the context of a provincial electricity operator. After a suspected coordinated cyber intrusion, an AI-based anomaly detection system recommends immediate substation isolation. The intervention likely prevents a cascading grid instability, but triggers rolling outages that affect hospitals and public transit. Post-incident analysis shows that the AI system substantially overestimated the probability of failure, prompting questions about AI-assisted decision making.

Barry Appleton

This case study examines the constitutional, regulatory and operational difficulties that have attended Kenya’s three successive attempts to deploy a national digital identity system. Each generation has been challenged in the High Court, and in each case the same legal flaw has been determinative. The case asks how a state should respond when its preferred operational path has been twice declared unlawful, and a third generation of the same system is now before the courts.

Maral Niazi, Abbas Yazdinejad and Hadis Karimipour

Amendments to the Canadian Payments Act are coming into force and expanding Payments Canada membership eligibility to payment service providers (PSPs) supervised by the Bank of Canada. Yet the broader problem remains unresolved: Canada does not yet have live Real-Time Rail (RTR) and is the only G7 country without a real-time payments system. The primary goal of this case study is to examine whether broadening eligibility is enough.

Dmytro Chumachenko

Launched in 2020, Diia, Ukraine’s “state-in-a-smartphone,” was serving about 22 million users and more than 140 services by 2025. However, this wartime success now collides with the EU Data Act, which requires cloud contracts to allow workload switching. If Diia’s cloud architecture cannot meet these portability and fee-free switching requirements, the country risks turning one of its flagship digital achievements from the accession era into evidence of non-compliance with the European Union’s digital rulebook.