Biden signs a memorandum expanding the NSA's role in protecting sensitive government networks, and mandating cybersecurity practices at DoD and spy agencies
The NSA gains a larger formal role in protecting sensitive government networks, while the DoD and intelligence agencies must implement the memorandum's required cybersecurity practices.
DoD and intelligence-agency security teams face a more centralized operating model, with NSA protection responsibilities alongside their internal compliance duties.
Second-order effects
Federal software procurement becomes more tightly connected to agency security requirements: the earlier vendor-standards effort now has a more immediate operational counterpart inside the agencies buying and deploying those products.
The split between mandatory rules for national-security networks and voluntary frameworks for private critical infrastructure increases pressure for common baselines where government systems depend on commercial software.
Third-order effects
The policy direction points toward a federal cyber posture that concentrates network-defense authority in specialized agencies while using procurement and standards to extend security expectations across suppliers.
If this pattern persists, the dividing line between intelligence-led network defense and civilian critical-infrastructure policy will become a central constraint on how broadly federal cybersecurity mandates can be applied.
The trend: US cybersecurity policy is pairing centralized defense of government networks with standards-based leverage over the technology supply chain.
Another step forward for federal coherence! Today's National Security Memorandum will ensure that the principles outlined in the President's Executive Order on cybersecurity are applied to our most sensitive national security systems as well. https://www.whitehouse.gov/...
NSM-8: (National Security Memorandum) There's going to be a new NCSS advisory on CNSA & Post-Quantum Crypto algorithms within 60 days, and a Quantum Resistant transition timeline in 180 days. (Again, please remember that this only applies to NSS.) https://www.whitehouse.gov/... h…
Cybersecurity failures have plagued the U.S. government for decades, including thefts of detailed personnel records and military secrets that have been blamed on Russia, China and other adversaries https://www.wsj.com/...
I'd stake good money that this is not purely proactive. You rarely see discussion of cross domain solutions (e.g. unclassified to classified) and for it to be called out so clearly in a public EO says something (just not sure what). https://www.whitehouse.gov/... https://twitter.…
President Biden issued a cybersecurity memo today requiring National Security Systems - including classified networks at the Pentagon and intelligence agencies - to adhere to certain cybersecurity practices: https://www.whitehouse.gov/...
today, President Biden signed a National Security Memorandum (NSM-8), requiring National Security Systems to employ the same network cybersecurity measures as those required of federal civilian networks in Executive Order 14028. https://www.whitehouse.gov/...
Substantive executive order with practical and actionable steps elevating cybersecurity like never before. #cyber #cybersecurity https://twitter.com/...
The Biden administration has warned critical infrastructure operators and some businesses in recent weeks to be on guard against Russian cyberattacks that could be spillover from tensions between Moscow and Kyiv https://www.wsj.com/...
The White House just released a memo on cybersecurity for national security systems. It's especially interesting to me because of its relevance to the transition to post-quantum cryptography. #postquantumcryptography #PQC #Cybersecurity https://www.whitehouse.gov/...
Umm. Is anyone seeing this?! #cybersecurity who has “the most most secure #blockchain on earth” quantum safe. $DRGN. Maybe nothing to see here but I am thinking otherwise! 🐉 👀 https://twitter.com/...
Here's the national security memorandum expanding the NSA's role in protecting national security systems and applying many of the May 2021 cyber EO's requirements to NSS: https://www.whitehouse.gov/... https://twitter.com/...
The NSA will take on a greater in government cybersecurity, with power to issue directives to other defense/intel agencies and new role as clearinghouse where other agencies must report hacks https://www.wsj.com/... via @dnvolz