Cyberspace policy,
cooperation &
resilience.

The central question was how the United States could adapt its cyberspace policies to safeguard national security as AI and Web 3.0 develop. Standards, government–business cooperation, and the cybersecurity workforce were particular concerns.

What depends on what?

Critical infrastructure systems are connected. A disruption in one can affect others. This lens asks how policies address those shared risks and support resilience.

What makes a policy workable?

Policies need strong institutions, skilled people, and partners who can work together. This lens looks at how countries build the skills and support to keep their systems secure.

One question set, used for every country.

The study used three questions in each of six themes: what the country did, what challenges it faced, and what successes or new ideas were reported. Explore the question groups below.

Policy adaptation and technology

1. How did the country adapt its cybersecurity policies in response to AI and Web 3.0?
2. What challenges did it face in adapting those policies?
3. What successes and innovations emerged?

Plain-language paraphrases of Table 1, questions 1a–1c, p. 41.

Compliance and regulation

1. How did the country design its compliance and regulatory frameworks for AI and Web 3.0?
2. What were its main compliance challenges?
3. What successes and innovations emerged?

Plain-language paraphrases of Table 1, questions 2a–2c, p. 41.

Public-private collaboration

1. How did the country encourage partnerships between government and business in cybersecurity?
2. What challenges did it face in developing those partnerships?
3. What successes emerged from its collaboration models?

Plain-language paraphrases of Table 1, questions 3a–3c, pp. 41–42.

Education and workforce development

1. How did the country develop its cybersecurity education programs?
2. What key challenges did it face in cybersecurity education?
3. What successes emerged from its education initiatives?

Plain-language paraphrases of Table 1, questions 4a–4c, p. 42.

National security and resilience

1. How did the country adapt its cybersecurity policies to protect national security in the AI and Web 3.0 era?
2. What key challenges did it face in maintaining national security in cyberspace?
3. What successes emerged from its cybersecurity initiatives?

Plain-language paraphrases of Table 1, questions 5a–5c, p. 42.

International cooperation

1. How did the country take part in international cybersecurity cooperation?
2. What challenges did it face in that cooperation?
3. What successes emerged from its international collaborations?

Plain-language paraphrases of Table 1, questions 6a–6c, p. 42.

The study chose cases with useful policy experience, shared features that made comparison possible, and enough written evidence to study closely. Differences in size, resources, and forms of government gave the comparison depth.

How it was applied here: Estonia, Sweden, the United Kingdom, and the United States offered different cybersecurity approaches within democratic systems. Their policy records supported the inquiry. They were selected for their relevance, rather than drawn as a random sample of countries.

The dissertation also cites the countries' Global Cybersecurity Index standing and relevance to the Information Technology sector. It considered other democracies, but limited the study to these four cases. Scott's fluency in Swedish supported access to Sweden's native-language documents.

The study read existing records: what governments had set out in policy and law, alongside research that helped place those records in context.

What countries put on paper

National cybersecurity strategies, policy documents, legislative acts, and government reports.

How those policies were examined

Academic literature, industry white papers, think tank reports, and publications from international organizations.

There were no interviews or focus groups. The records could show how policies were described and discussed. They offered less insight into the decisions and day-to-day work behind them.

The methods chapter describes archival research through the APUS Library and sources including JSTOR, Scopus, IEEE Xplore, Google Scholar, Semantic Scholar, and ProQuest. Government repositories included the U.S. Federal Register and the government portals of the United Kingdom, Sweden, and Estonia.

Chapter 3 calls original policy and legal records primary sources, and research about them secondary sources. Its limitations section also describes the study as relying on secondary data. In either usage, this was a study of existing documents, without firsthand interviews.

Coding means labeling a relevant passage to identify what it is about. A codebook is the guide to those labels. A theme connects related ideas into a broader pattern.

Label the material.

• Descriptive codes summarize a topic.
• In Vivo codes preserve wording from the document.
• Process codes identify an action.

Connect the labels.

Related codes are linked into broader groups through axial coding. In this study, those second-cycle groups and themes refer to the same level of analysis.

The study combined Saldaña's coding approach with Braun and Clarke's thematic analysis framework. Its six phases were: become familiar with the documents; generate initial codes; identify broader themes; review those themes; define and name them; and bring the findings together in the dissertation. Repeated review linked the evidence, themes, and research questions.

The shared questions gave the comparison its structure. Source checks, case details, and notes helped show how the researcher reached a view.

• 1

  Compare different kinds of sources.

  The study checked interpretations across policy documents, legislation, national strategies, academic literature, and industry papers. This is called triangulation.

• 2

  Preserve each country's context.

  A close account of the policies and setting of each case helps readers judge whether a lesson could apply elsewhere.

• 3

  Record decisions about the analysis.

  Analytic memos are notes on coding and themes. They recorded key decisions. The researcher returned to the material as the coding process developed.

• 4

  Use software to organize the comparison.

  NVivo supported the management of coded text, comparisons across countries through matrix coding queries, and visual exploration of themes.

What the numbers mean: the theme tables count coded references in the material. They describe the evidence discussed; they should not be read as scores for how safe a country is or as proof that a policy caused an outcome.

The original research and the later article, podcast, and website are distinct stages. The role of AI in each deserves its own explanation.

AI assistance went beyond proofreading.

According to Scott's account, he used tools from OpenAI and Anthropic to help correct spelling and grammar and keep the paper's flow consistent. AI also assisted with creating the codebook, developing themes, and parsing sources for codes and themes. Scott carried out the intellectual work of the study.

Author's account supplied September 13, 2026. This disclosure supplements the published methods chapter; it is not presented as a statement found in that chapter.

NVivo in the dissertation

The methods chapter describes NVivo as the main qualitative analysis tool for organizing coded material, comparing cases, and exploring themes. That documented role is separate from the author's later account of LLM assistance.

AI in the later public-facing materials

AI was also used to adapt the finished dissertation into this article, podcast, and website. The podcast uses a synthetic voice. Those production activities explain how the study is presented here; they are separate from how the original research was conducted.

The comparison informed policy recommendations the United States could adapt to its own circumstances. It did not establish one country as a universal model.

Documents offer a partial view.

Public records may not reveal how a policy works in practice. Without interviews, the study had less access to firsthand decisions and experiences. Classified and proprietary material also limited visibility.

Countries differ.

A smaller country's approach may need major changes to work in a larger federal system. Government structures, resources, and timing affect whether a lesson can carry over.

Interpretation remains human.

A consistent coding process and software support do not remove researcher judgment. Preconceptions can influence which patterns receive attention and how they are understood.

The evidence reflects its time.

The findings describe the policies and material examined for the 2025 dissertation. AI, Web 3.0, and cybersecurity policy continue to change; this page explains the completed study.