The Biden administration releases its cybersecurity strategy, seeking to impose minimum standards, shift responsibility to larger software makers, and more
The strategy represents a shift in how Washington approaches cybersecurity, veering toward a more strictly regulated approach.
CyberScoop
Context & Ripple Effects
Washington had already begun moving away from voluntary corporate cooperation in its push for stronger cyber oversight and minimum standards, following Biden's 2021 order to develop security standards for software sold to the government. The new strategy turns that direction into a broader policy position: larger software makers are expected to carry more of the security responsibility.
First-order effects
Large software makers face a clearer policy expectation to build and maintain security as a producer responsibility rather than leaving risk primarily with customers.
Washington gains a strategy framework for pursuing minimum cybersecurity standards instead of relying chiefly on voluntary commitments.
Second-order effects
Software buyers gain a stronger basis to demand security assurances from major vendors, making vendors' security practices a more consequential procurement factor.
Smaller software suppliers may face pressure to align with standards shaped around the capabilities and compliance resources of larger makers.
Third-order effects
If Washington follows the strategy with enforceable requirements, cybersecurity shifts from a voluntary corporate practice toward a regulated product-governance obligation.
The trend: US cybersecurity policy is moving from voluntary cooperation toward minimum standards and greater producer accountability for software security.
A round-up of the National Cyber Strategy for the digital identity crowd: -Gov will “encourage and enable” investment -Big emphasis on vendor choice, security, privacy, equity, accessibility -encourages same focus for states piloting mobile driver's licenses -more NIST research
“The move to establish minimum standards builds on efforts in recent decades to write minimum security standards, especially in the energy industry, and Thursday's document makes clear that similar measures are coming for other critical infrastructure sectors” https://twitter.com…
The strategy is divided into five pillars (see screenshot in previous tweet) and emphasizes two major societal and policy shifts: 1. Shifting burden for security away onto “most capable and best-positioned actors” 2. Investing in long-term resilience w/ regs, incentives, R&D http…
The Biden administration this morning released its long-awaited National Cybersecurity Strategy: https://www.whitehouse.gov/... Major proposals include: * New critical infrastructure regulatory authority * Liability for software vendors * Limits on private-sector data collection …
In a real pivot, the Biden administration lays out a cybersecurity strategy that goes beyond traditional, voluntary means of information sharing and public-private partnership and onto regulations within critical sectors “that level the playing field.” https://www.cbsnews.com/...
NEW: The White House has unveiled its long-awaited national cybersecurity strategy. Calling for comprehensive regulation, the 38-page blueprint elevates criminal ransomware attacks on critical infrastructure to matters of national security. https://www.cbsnews.com/...
There was a gaping $1.8 billion hole in Binance's balance sheet where there should have been USDC collateral. By the way, it has over 90 other “B-tokens” that it issues and collateralizes with the underlying crypto, all of which are susceptible to this same rehypothecation. https…
New US cyber strategy “endorses more aggressive action to disrupt malicious hackers, an area of concentration for the Trump administration, which authorized Cyber Command to more freely undertake offensive missions in cyberspace.” https://www.washingtonpost.com/ ... https://twitt…
The White House's long-awaited National Cybersecurity Strategy is out: https://www.whitehouse.gov/... Actual document PDF: https://www.whitehouse.gov/... Live stream with the announcement later today: https://www.youtube.com/... https://twitter.com/...
ICYMI: The establishment pressure on Binance intensifies. Forbes reports that Binance *possibly* engaged in monkey business by quietly moving $1.8B of collateral meant to back its customer's stablecoin deposits to be sent to hedge funds; including Alameda https://www.forbes.com/.…