A consensus rule is a decision-making method in which a proposal moves forward only when a broad group agrees, or at least does not object. In security policy, standards bodies, treaty talks, and multistakeholder groups often use it to avoid imposing rules that key participants will not accept. The tradeoff is speed: one reluctant actor can delay or block progress, even when the technical risk is urgent.
In cyber security, consensus rules matter because many defenses depend on shared coordination, such as vulnerability disclosure norms, encryption standards, and incident-response procedures. The same process can also become a bottleneck in adversarial settings, where attackers benefit from delay and defenders need fast, precise rules. For that reason, consensus is useful for legitimacy and cooperation, but it can weaken response when decisions must be made quickly.