Gender-focused evaluation of cyber capacity building projects

We invited Dr. Ekaterina Dorodnykh, who has been working in collaboration with Dr. Matteo Lucchetti, to share their findings on cybersecurity capacity building project evaluation from gender-based perspective and why gender-based aspects of project evaluation are important.

Dr. Ekaterina Dorodnykh, Evaluation Data Specialist at United Nations Entity for Gender Equality and the Empowerment of Women (UN Women).

 

Dr. Matteo Lucchetti, Director of CYBER 4.0, Italian National Cybersecurity Competence Center, and Member of the Advisory Board at GFCE.

1. Ekaterina, tell us what has encouraged you to start exploring capacity building project evaluation?

I have been working with the United Nations for the last 12 years, and capacity-building activities are often critical components of development projects around the world. Capacity-building activities aim to enhance individuals, organizations, or communities’ knowledge, skills, and abilities to achieve their goals, sustain development efforts, and build resilience.

At the same time, evaluating capacity-building activities is crucial for assessing their effectiveness and impact because it helps identify strengths, weaknesses, and areas for improvement. Moreover, evaluation is critical in promoting accountability for donors and learning for implementing partners to understand why and to what extent capacity development activities were achieved and analyze the impact of the results.

In collaboration with Dr. Matteo Lucchetti (Director of CYBER 4.0, Italian National Cybersecurity Competence Center, and Member of the Advisory Board, GFCE) I started to explore how cyber security projects can mainstream gender and how evaluation of these projects can be used as a tool for reducing gender-based violence because evaluation is not only a driver of positive change in terms of gender equality but also the process itself that empowers the stakeholders involved in cybersecurity capacity development activities.

2. What work have you done so far and what are your findings?

So far, we have developed and presented the research paper on “Role of Gender-Focused Evaluation of Cyber Capacity Building programmes as a tool for Reducing Gender-Based Violence” presented at GC3B Research Workshop. Also, we participated in the Lightening Talks during the Octopus Conference (December, 2023), organized by the Council of Europe on the topic “Women in Cyber” to promote the use of gender-focused evaluation of cyber security programmes. We argue that cybercrime is not just a technical issue but also a policy issue, an equality issue, and a justice issue where gender-focused capacity-building efforts can contribute to preventing cyber violence against women and girls and further support the adoption of national gender-focused cybersecurity and cybercrime policies.

Therefore, gender-focused evaluation of cyber capacity-building programs can support the identification and analysis of specific issues in the cyber domain. The effects of gender-focused evaluations of cyber capacity-building programmes could be threefold:

decoration

Acceleration

They can further accelerate national-level policy processes to address cybercrimes through legislations in line with international human rights and rule of law standards, such as the Budapest Convention.

decoration

Tackling underreporting

They can help to tackle the ever-increasing issue of underreporting this kind of crime by raising awareness of what is to be considered criminal conduct and when one should report it.

decoration

Increased impact

They can finally increase the impact of cybercrime capacity development interventions on the positive digital engagement of women and girls and equal access to digital tools to increase their digital literacy.

3. During the GFCE annual meeting in 2023 in Ghana you have talked about your research paper on measuring impact of initiatives for prevention of cyber violence against women and girls – what are your key findings and insights?

In our research paper, we presented how cyber violence disproportionately affects women and girls of all ages and has strong psychological, behavioural, and economic consequences. Women and girls are also more exposed to experience cyberstalking through abusive language, harassment, denigrating images, and aggressive behaviour in online spaces. While there is an increased prevalence of online violence against women and girls globally, especially during and after the Covid pandemic, there are notable regional differences, where women and girls in developing countries are more exposed to online violence compared to the prevalence rates in developed countries. In most cases, online gender violence is due to unequal access to digital education, lack of legal framework, and underreporting, due either to the lack of knowledge on what is to be considered criminal conduct or to the decision taken by the victims not to expose themselves publicly. As a result, there is a lack of reliable statistics, even at the country level, on cybercrimes against women and girls that are actually needed to guide the policymakers toward adopting a regulatory framework that could finally address cyberviolence against women and girls.

At the same time, despite the increased prevalence of cyber violence against women and girls, policy attention is still limited, and gender and cybersecurity are the new field of development interventions to support women and girls globally. With reference to UN Women’s regional programme on Women Peace and Cybersecurity, our research paper sought to answer how gender-focus capacity-building efforts can contribute to preventing cyber violence against women and girls and further support national gender-focused cybersecurity laws and policies. Findings confirm that capacity development, including a cyber capacity focused on women and girls, is an enabling factor in the gender equality framework, as capacity development is important for developing legislation. Moreover, increasing awareness and capacities on gender-responsive cybersecurity among national partners, including government, civil societies, and academia, has an impact on accelerating national-level processes further and strengthening the cybersecurity field. However, there is still a lack of national data on the prevalence of online gender-based violence, especially in developing countries, which might limit effective national policy development. Therefore, promoting gender-focused capacity development activities and further work with national counterparts is needed to deepen the current understanding of the gendered dynamics of online space and the development of gender-focused legislation to prevent violence against women.

4. What do you see as the greatest challenges for evaluating cybersecurity capacity projects overall?

There is still a lack of data on the prevalence of online gender-based violence, especially in developing countries, which might limit effective baseline data collection and impact assessment of cybersecurity capacity projects.

Moreover, the literature review confirms the limited evaluation guidelines to assess the performance of cybersecurity programmes with respect to gender. However, evaluation that neglects or omits considerations of gender component deprives donors, partners, and the intervention’s stakeholders of evidence about who benefits (and does not) from cybersecurity capacity development interventions and may miss opportunities for demonstrating how effective interventions are carried out with respect to men and women. In addition, an evaluation carried out without a gender focus will most likely lose its credibility, as it may fail to regard the importance of underlined development interventions.

Therefore, the greatest challenges are related to the lack of data, lack of standardized gender-focused evaluation methodology, and overall limited capacity of international independent evaluation experts to embrace both technical aspects of evaluating international cybersecurity capacity projects and knowledge of gender-focused evaluation.

5. What further cybersecurity capacity projects related to research planned ahead?

1.

Gender mainstreaming in cyber capacity-building

Support the advocacy for gender mainstreaming in cyber capacity-building as this emerging issue still appears heterogeneous and fragmented. We argue that experts working in cybersecurity capacity development should be better trained on gender equality issues, and more trainings focusing on women and girls should be designed as part of cyber capacity-building projects.

2.

Development of a gender-focused standardised approach

The approach is intended for the evaluation of cybersecurity capacity projects. While gender is becoming a cross-cutting issue of cyber capacity-building initiatives, the gender-focused evaluation of these programmes is still at an early stage because of methodological aspects and limited data disaggregated by sex within the target beneficiary group. Methodology-wise, gender-based evaluation of cyber capacity-building programmes should follow a gender-responsive approach with a special focus on impact assessment for policy development to prevent cyber violence against women and girls.

3.

Training of cybersecurity capacity experts

Development and consolidation of training materials for cybersecurity capacity experts to learn technical aspects of gender mainstreaming in cybersecurity capacity projects.

1.

Gender mainstreaming in cyber capacity-building

Support the advocacy for gender mainstreaming in cyber capacity-building as this emerging issue still appears heterogeneous and fragmented. We argue that experts working in cybersecurity capacity development should be better trained on gender equality issues, and more trainings focusing on women and girls should be designed as part of cyber capacity-building projects.

2.

Development of a gender-focused standardised approach

The approach is intended for the evaluation of cybersecurity capacity projects. While gender is becoming a cross-cutting issue of cyber capacity-building initiatives, the gender-focused evaluation of these programmes is still at an early stage because of methodological aspects and limited data disaggregated by sex within the target beneficiary group. Methodology-wise, gender-based evaluation of cyber capacity-building programmes should follow a gender-responsive approach with a special focus on impact assessment for policy development to prevent cyber violence against women and girls.

3.

Training of cybersecurity capacity experts

Development and consolidation of training materials for cybersecurity capacity experts to learn technical aspects of gender mainstreaming in cybersecurity capacity projects.

Other interesting cybersecurity stories

What impact might NIS2 have on Africa?
What impact might NIS2 have on Africa?
What impact might NIS2 have on South America?
What impact might NIS2 have on South America?
How Lithuania stepped up its game with the NIS2 directive
How Lithuania stepped up its game with the NIS2 directive
Security automation: from idea to tool
Security automation: from idea to tool
SOCcare May 2025 Malpeek: Analysis of a "copyright infringement" malware
SOCcare May 2025 Malpeek: Analysis of a "copyright infringement" malware
NRD Cyber Security recorded strong growth and international expansion in 2024
NRD Cyber Security recorded strong growth and international expansion in 2024
Building awareness is a continuous effort
Building awareness is a continuous effort
Facilitating dialogue on NIS2 within the Lithuanian cybersecurity ecosystem
Facilitating dialogue on NIS2 within the Lithuanian cybersecurity ecosystem