Risk 360

Satellites, Cyber Risk and Continuity: Building a Resilient Space Strategy

Getting India Risk Ready

Space infrastructure is easiest to overlook when it is working. Navigation signals guide aircraft, ships and road transport. Precise timing synchronises telecommunications, electricity networks and financial transactions. Earth-observation data supports weather forecasting, agricultural planning, environmental monitoring and disaster response. Satellite communications connect remote communities and restore connectivity when terrestrial networks fail.

These services may originate above Earth, but their failure would be experienced on the ground.

This makes a national space strategy more than a plan for launching rockets, building satellites or funding scientific missions. It is a framework for managing a country’s dependence on space-enabled services: identifying which national functions rely on them, determining how those services could be disrupted, allocating responsibility for their protection, conducting risk identification and risk assessment, and ensuring that viable alternatives exist.

The central question is therefore no longer whether a country considers itself “spacefaring”. It is whether the country understands and manages the space dependencies already embedded in its economy, infrastructure and public services.

What is a national space strategy?

A national space strategy defines how a country will use, obtain, protect and govern space capabilities in support of national priorities.

It should answer five fundamental questions:

  1. Which economic, social, scientific and security outcomes require space-enabled services?
  2. Which capabilities should be developed domestically, acquired commercially or accessed through international partnerships?
  3. How will critical services continue during technical failure, cyberattack, interference, supplier disruption or orbital congestion?
  4. How will public agencies, regulators, research institutions and private operators coordinate their responsibilities?
  5. How will space activities remain safe, lawful and environmentally sustainable over their full operating life?

This is materially different from a catalogue of missions. A list of planned satellites may demonstrate ambition, but it does not necessarily establish how those assets contribute to national resilience.

The World Economic Forum (WEF) notes that more than 90 countries have launched satellites and around 80 space agencies operate worldwide. It also argues that states no longer need to build every layer of the space technology stack themselves. They can enter through targeted capabilities such as Earth-observation analytics, satellite communications, ground infrastructure, component manufacturing or location-based services.[1]

A credible strategy must consequently make explicit build, buy, partner and regulate decisions. Attempting to achieve sovereignty by duplicating every capability may waste resources. Depending entirely on external providers may create space risks such as concentration and continuity risks. Strategy is the discipline of deciding where autonomy is essential and where interdependence is acceptable.

Why space must be treated as critical infrastructure

Space services now function as an enabling layer beneath multiple infrastructure sectors.

Positioning, navigation and timing—collectively known as PNT—does much more than display a location on a map. Precise satellite-derived timing can support network synchronisation, electricity-grid monitoring, mobile communications, banking systems and transport operations. US government resilience guidance therefore recommends that critical-infrastructure operators assess their dependence on satellite PNT and develop alternatives where interruption would cause material harm.[2]

Satellite communication has similar cross-sector importance. It can provide connectivity to maritime operations, aviation, remote industries, emergency services and communities beyond the economical reach of terrestrial networks.

Earth observation contributes to flood mapping, crop monitoring, wildfire detection, infrastructure assessment and climate-risk analysis. The World Economic Forum cites UN analysis indicating that space-based services support nearly 40% of the 169 Sustainable Development Goal targets.[1]

These dependencies create a systems problem. The loss of one satellite does not necessarily produce a national emergency. However, disruption to a widely used positioning, timing or communications service may cascade through organisations that did not recognise themselves as part of the space ecosystem.

A national strategy should therefore begin with a space-dependency register, not a launch schedule.

For each critical service, the register should identify:

  • the satellite constellation or data provider;
  • the ground stations, gateways and terrestrial networks involved;
  • the government and commercial users;
  • acceptable outage duration;
  • required accuracy, integrity, latency and availability;
  • single points of failure;
  • foreign ownership or jurisdictional dependencies;
  • recovery arrangements and independent fallback systems.

Without this mapping, national exposure remains largely invisible.

Resilience requires more than additional satellites

Redundancy is often interpreted as placing more spacecraft in orbit. That can improve availability, but it does not address every failure mode.

A satellite service is a system of systems comprising the spacecraft, payload, control software, ground stations, communications links, cloud or data-processing infrastructure, user terminals and supply chain. A vulnerability in any one segment can affect the complete service.

In July 2025, a failure in key internal software services caused a major global Starlink outage. Service was largely restored after approximately two and a half hours, but the incident demonstrated that a highly distributed satellite constellation may still contain centralised software or network dependencies.[3]

PNT services face a different threat. Jamming blocks legitimate satellite signals, while spoofing introduces false positioning or timing information. In September 2025, an aircraft carrying the European Commission President experienced GPS interference and relied on ground-based navigation systems to land safely. The incident illustrates the importance of retaining independent navigation methods rather than assuming continuous satellite availability.[3]

Resilience therefore requires diversity across several dimensions:

Constellation diversity: Access to more than one satellite system or orbital architecture.

Provider diversity: Avoiding dependence on a single commercial operator for nationally critical services.

Ground-segment diversity: Geographically separated control centres, gateways and network routes.

Technology diversity: Combining satellite services with terrestrial communications, inertial navigation, local timing sources or other independent alternatives.

Operational diversity: Ensuring that backup systems do not depend on the same software, supplier, authentication service or cyber-control plane as the primary system.

Two systems are not meaningfully redundant when they share the same hidden point of failure.

Cyber resilience must cover the complete mission lifecycle

The growth of commercially integrated and hybrid satellite networks has expanded the number of interfaces between government systems, commercial operators, ground infrastructure and user equipment.

The National Institute of Standards and Technology (NIST) describes hybrid satellite networks as aggregations of independently owned and operated satellites, payloads, terminals, antennas and other components. Because these elements may have different levels of assurance, resilience depends on assessing the security of the interfaces as well as the individual assets.[4]

A national space strategy should establish minimum cybersecurity requirements covering design, procurement, launch, operations, software maintenance and disposal. These should include:

  • secure boot and hardware roots of trust;
  • strong command authentication and encryption;
  • protected cryptographic-key management;
  • separation of mission, corporate and public networks;
  • zero-trust access controls for operators and suppliers;
  • software bills of materials;
  • vulnerability disclosure and patch-management processes;
  • telemetry-based anomaly detection;
  • backup command-and-control capability;
  • tested incident-response and recovery procedures;
  • cyber requirements for ground stations and user terminals;
  • controls against compromised hardware, firmware and software dependencies.

Legacy spacecraft present a particular challenge. Satellites can remain operational for many years after their computing architecture and security assumptions have become outdated. Unlike terrestrial servers, they may have limited processing capacity, intermittent connectivity and little ability to receive major security upgrades.

The strategy should therefore require cybersecurity risk to be assessed before mission approval and budget for secure operations throughout the planned asset life—not merely through launch.

Orbital congestion is a national continuity risk

Earth orbit is a finite operational environment. As more satellites and launch stages are placed into orbit, conjunction warnings, collision-avoidance manoeuvres and debris-related risks increase.

The European Space Agency’s June 2026 statistics recorded approximately 46,070 objects being regularly tracked, about 18,340 satellites still in space and roughly 16,100 functioning spacecraft. The number of smaller objects is significantly greater because many fragments cannot be routinely tracked.[5]

ESA’s 2025 assessment estimated more than 1.2 million debris objects larger than one centimetre—large enough to cause catastrophic damage—and reported that fragmentation events in 2024 added thousands of tracked objects. It concluded that mitigation alone may no longer be sufficient because collisions and break-ups can continue increasing the debris population even without additional launches.[5]

A national strategy should therefore integrate space situational awareness and space-traffic coordination into routine mission governance. Technical requirements should include:

  • pre-launch collision analysis;
  • reliable spacecraft identification and registration;
  • routine conjunction assessment;
  • manoeuvrability and adequate propellant reserves;
  • operator-to-operator coordination protocols;
  • passivation of batteries and propulsion systems;
  • post-mission disposal plans;
  • controlled re-entry assessments where applicable;
  • contractual responsibility for end-of-life operations;
  • reporting of break-ups, anomalies and loss of control.

The United Nations’ long-term sustainability guidelines also address national regulation, supervision of space activities, registration, orbital information sharing, conjunction assessment, space-weather monitoring and debris mitigation. Incorporating these principles into licensing and procurement can convert voluntary international norms into practical operating controls.[6]

A five-layer national space resilience model

A useful way to translate strategy into implementation is to organise it as a five-layer resilience model.

Layer 1: National outcomes

Identify the outcomes space services must support: food security, connectivity, public safety, transport, climate adaptation, resource management, scientific research or economic development.

This prevents technology acquisition from becoming detached from public need.

Layer 2: Critical services

Define the required Earth-observation, PNT, communications, weather and scientific services. Each service should have measurable requirements for availability, accuracy, integrity, latency, geographic coverage and recovery time.

Layer 3: Technical architecture

Determine how satellites, ground stations, processing systems, communications links and user devices will deliver those services. The architecture should prioritise infrastructure risk and incorporate multi-provider access, geographic distribution and terrestrial fallback where the consequence of failure is high.

Layer 4: Assurance and sustainability

Apply cybersecurity, supply-chain assurance, space situational awareness, spectrum protection, safety engineering and end-of-life requirements. Operational resilience should be validated through exercises and technical testing rather than assumed from design documents.

Layer 5: Governance and capability

Clarify decision rights among ministries, the national space agency, regulators, emergency-management authorities, research institutions and commercial operators. Establish funding, procurement, licensing, workforce-development and international-cooperation mechanisms.

Weakness in any layer can undermine the entire strategy. A country may possess advanced satellites but lack the data-processing capacity to turn observations into timely decisions. It may have commercial connectivity but no continuity arrangement if the provider fails. It may encourage launches without sufficient licensing, collision-management or disposal requirements.

The role of commercial capability

Commercial providers can accelerate access to space, reduce capital requirements and introduce technical innovation. The WEF analysis notes that commercial operators accounted for approximately 70% of spacecraft launches in 2024 and that private investment in space increased between 2023 and 2024.[1]

Commercial participation should therefore be treated as a core component of national capability rather than an external supplement. However, procurement contracts must address continuity, security and sovereign-risk questions.

Governments should examine:

  • whether service can be suspended unilaterally;
  • where data is stored and processed;
  • which jurisdiction governs the provider;
  • whether the government can obtain priority access during emergencies;
  • whether systems are interoperable with alternative providers;
  • whether technical interfaces and data formats are portable;
  • how incidents must be reported;
  • what happens if the supplier is acquired, insolvent or sanctioned;
  • whether the provider’s subcontractors create concentration risk.

The objective is not to avoid commercial dependence. It is to make that dependence visible, governable and recoverable.

Relevance for emerging space economies

A national space strategy does not require every country to establish a vertically integrated launch and satellite-manufacturing industry.

For many economies, the highest near-term value may be found downstream: converting satellite data into services for agriculture, disaster management, infrastructure planning, logistics, insurance and environmental monitoring. Others may develop specialist components, ground infrastructure, software, research capability or regional service hubs.

India’s institutional model illustrates an attempt to distinguish public missions, commercial activity and private-sector authorisation. The Indian Space Policy 2023 provides the overarching policy structure, while IN-SPACe acts as a single-window agency for promoting, enabling, authorising and supervising specified non-government space activities.[7]

India has also established IS4OM to coordinate space situational awareness and sustainability activities. Its 2024 assessment reported continuing growth in the global orbital-object population and highlighted the contribution of fragmentation events to debris risk.[7]

The broader lesson is that national strategy must connect economic development with operational assurance. Expanding private participation without licensing capacity, safety standards, cyber controls and access to orbital data may increase activity without proportionately increasing risk resilience.

Measuring whether the strategy is working

A national space strategy should be evaluated through operational indicators, not only launches, investment announcements or satellite counts.

A resilience dashboard could measure:

  • availability of each critical space-enabled service;
  • percentage of critical users with tested fallback capability;
  • maximum demonstrated PNT holdover time;
  • time required to detect and recover from a cyber incident;
  • supplier and constellation concentration;
  • percentage of missions meeting post-mission disposal requirements;
  • number and severity of unresolved conjunction events;
  • frequency of continuity exercises;
  • ground-station geographic diversity;
  • proportion of critical components with qualified alternative suppliers;
  • time from Earth observation to decision-ready information;
  • workforce gaps in engineering, cyber, data science and regulation;
  • commercial procurement delivered through interoperable standards.
  • implementation of risk strategies and instances of risk governance 

These measures shift the focus from possessing space assets to sustaining national services.

From space ambition to national resilience

A national space strategy should not be judged by how closely it imitates the programmes of established space powers. It should be judged by whether it makes the country’s economy, infrastructure and public institutions more capable of anticipating, absorbing and recovering from disruption.

That requires a strategy grounded in national outcomes, explicit dependencies, technical resilience and institutional accountability.

Space systems will become more commercial, interconnected and congested. They will also become more deeply embedded in ordinary economic and social activity. The resulting opportunity is substantial, but so is the possibility of satellite risk, hidden concentration, cyber, safety and continuity risks.

The most resilient nations will not necessarily be those that own the greatest number of satellites. They will be those that know which space services they depend on, understand how those services can fail and maintain credible alternatives when they do.

A national space strategy is therefore not simply a plan for activity beyond Earth. It is a continuity strategy for life, infrastructure and economic value on Earth.

 The author confirms that this article is original and has not been copied, reproduced, or derived from another author’s work, except for appropriately cited third-party references used for research purposes.

References

[1] National Space Strategy Toolkit and reasons nations require a space strategy [World Economic Forum]

https://www.weforum.org/stories/emerging-technologies/5-reasons-why-nations-need-space-strategy/?

[2] PNT dependency and critical-infrastructure resilience guidance [National Coordination Office for Space-Based Positioning, Navigation, and Timing (PNT)]

https://www.gps.gov/resilience-through-responsible-use-pnt?

[3] Global satellite-network outage and GPS-interference reporting [Reuters]

https://www.reuters.com/technology/elon-musks-starlink-network-suffers-rare-global-outage-2025-07-24/?

[4] Cybersecurity Framework Profile for Hybrid Satellite Networks [National Institute of Standards and Technology (NIST)]

https://www.nist.gov/publications/cybersecurity-framework-profile-hybrid-satellite-networks-hsn?

[5] Current orbital population and space-debris risk analysis [European Space Agency] https://sdup.esoc.esa.int/discosweb/statistics/?

[6] Long-term Sustainability of Outer Space Activities Guidelines [UN Office for Outer Space Affairs]

https://lts.unoosa.org/unoosa_lts/index.html?

[7] Indian Space Policy, institutional roles and space situational assessment [Indian Space Research Organisation]

https://www.isro.gov.in/IndiaSpacePolicy.html?

You may also like

Leave a reply

Your email address will not be published. Required fields are marked *

More in Risk 360