The use of cyber operations as means or methods of warfare in armed conflicts poses a real risk of harm to civilians. It is essential to understand how international humanitarian law protects civilians, civilian infrastructure and civilian data against cyber harm.