Obama Said Near Issuing Executive Order on Cybersecurity
President Barack Obama will issue an executive order aimed at bolstering U.S. cybersecurity as soon as next week, according to two former White House officials briefed on the administration's plans.
Context & Ripple Effects
This is the payoff to a five-month run-up: the White House began circulating a draft cybersecurity executive order in September 2012, and within days the text surfaced online in a leaked version that made clear it was written to stand in for stalled legislation rather than complement it. Bloomberg's report that two former White House officials expect signature as soon as next week is still a rumor at this point, but it tracks the draft's maturity.
What makes the moment consequential is the route, not just the subject: after Congress failed to move comprehensive cyber legislation, the administration appears ready to act alone, converting what was drafted quietly into binding-ish federal policy on information sharing and infrastructure security.
First-order effects
- The White House shifts U.S. cybersecurity policy from a stalled bill to an executive order, putting federal agencies on the hook to implement whatever the directive contains without waiting for Congress.
- Private-sector operators of critical infrastructure become the immediate audience: the order's provisions on threat information and security practices reach them by presidential pen rather than statute.
Second-order effects
- Lawmakers who watched their cyber bills die now face a White House setting the same territory unilaterally, raising pressure either to pass authorizing legislation or to contest the order's scope.
- Industry groups and companies asked to share threat data with the government gain a concrete document to react to — lobbying shifts from killing a bill to shaping implementation and liability terms.
Third-order effects
- If the pattern holds, the executive order becomes the standing substitute whenever cyber legislation stalls, letting each administration redraw private-sector security obligations on its own authority.
- A unilateral U.S. template on threat sharing also sets a reference point other governments and standards bodies will negotiate against, embedding American choices in international cyber norms.
The trend: With comprehensive cyber legislation stalled in Congress, the White House is turning the executive order into the primary instrument for setting U.S. cybersecurity policy.