The Independent View: Trump Signs Long-Awaited Cyber Order

President Trump today signed a long-delayed Cybersecurity Executive Order that launches sweeping reviews of the Federal Government’s Digital Vulnerabilities and directs Agencies to adopt Specific Security Practices.

The Directive is Trump’s first Major action on Cyber Policy and sets the stage for the Administration’s efforts to Secure porous Federal Networks that have been repeatedly Infiltrated by Digital Pranksters, Cyber Thieves, and Government-Backed Hackers from China and Russia.

“The trend is going in the wrong direction in cyberspace, and it’s time to stop that trend and reverse it on behalf of the American people," White House Department of Homeland Security (DHS) Adviser Tom Bossert told reporters during a Thursday afternoon Briefing.

Cyber Specialists say the Order breaks little new ground but is vastly improved over early Drafts, which omitted Input from Key Government Policy Specialists. The final Version, Cyber Watchers say, essentially reaffirms the gradually emerging Cyber Policy path of the past two Administrations. But Bossert said that while the Obama Administration made "a lot of progress" on Cyber, that it didn't do "nearly enough".

The Executive Order creates a bevy of Reviews, including an Assessment of the Cyber Risks at every Agency. The Executive Fiat also orders a Review of current efforts to protect Vital Infrastructure like Power Plants and Hospitals, as well as a Report on Building the Cyber Workforce, which is facing significant shortages of well-trained employees.

As part of the Executive Order’s IT Upgrade Initiative, Administration officials will study the feasibility of Transitioning to Shared IT Services and Networks across the Government. An estimated 80% of the $80 billion Federal IT Budget goes toward taking care of Aging systems.

If the Government doesn't start to use Joint IT Services, such as Cloud Computing, Bossert said "we're going to be behind the eight-ball for a long time."

Senior Trump Adviser Jared Kushner’s Office of American Innovation will play a significant role in the Federal IT Modernization effort. Earlier this month, Trump signed an Executive Order creating the American Technology Council (ATC), with Kushner as Director, to help coordinate that effort.

A Senior Administration official told reporters in a background briefing that the Tech Council would have “the responsibility for managing” the “very difficult implementation process” of modernizing Federal IT Systems.

Today's Signing is the most concrete step Trump has taken to follow through on the numerous vows he made during the Campaign and after his November Victory regarding Cybersecurity.

Once an obscure Technical Issue far from the Political spotlight, Cybersecurity has slowly gained prominence in recent years as Digital Crooks and Cyber Spies breached Major companies like Target and Sony, as well as Federal Agencies like the Office of Personnel Management, which houses sensitive Background Check forms.

Trump has also been under pressure to take action after suspected Russian-backed hackers rattled the 2016 Presidential Election, infiltrating Clinton’s Campaign, and strategically leaking Documents in what U.S. Intelligence Officials believe was an attempt to help install Trump in the Oval Office.

Bossert told reporters that developing the Order "wasn’t a Russian-motivated issue. It was a United States-motivated issue." It follows through on Trump’s Campaign Promises to examine the Digital Defenses protecting both the Government and Private sector, and to establish a plan for better Locking Down Networks that have often left Treasure Troves of Data exposed to Hackers.

The Directive has been in the works for at least three months. It was first set to receive Trump’s Signature back in January, but the Administration abruptly canceled the Signing at the last minute. The highly anticipated Order then underwent several rewrites as Trump filled Key jobs, like his Cybersecurity Coordinator Rob Joyce, the Head of the National Security Council’s Cyber Directorate, and replaced his National Security Adviser.

Bossert noted that the White House solicited input from a number of Cyber-Centric Republican Lawmakers, including House Homeland Security Chairman Michael McCaul (TX) and Senate Intelligence Chairman Richard Burr (NC). He also said Democratic Sen. Sheldon Whitehouse (RI) played a key role, as did former New York Mayor Rudy Giuliani, who is leading an outside Commission to gather Cyber Advice from the Private Sector.

The Order has been finished since early April, and the Plan was to release it alongside the Directive establishing the Kushner-backed ATC, according to one person familiar with the Administration’s planning. But Kushner presented the ATC Order to Trump first, and the President signed it, frustrating the National Security Council (NSC)’s Cyber Wing.

In addition to the wide-ranging reviews, the latest Draft of the Order also includes specific cybersecurity Directions for Government Agencies. That Draft requires each Department Chief to adopt the Digital Defense Standards laid out in a Cyber Framework developed by Experts at the National Institute of Standards and Technology, a Tech Standards-Setting Agency.

In their individual Reports, agency Leaders must explain “the strategic, operational, and budgetary considerations” that led to their Security choices. The Administration believes this Section will lead to more Accountability among Agency Heads for their Department’s Cybersecurity failures.

The Order will also create a Report on the Threat from Botnets, Armies of Remotely Hijacked Computers that Malicious Hackers use to Debilitate Targets with Floods of Traffic. The Senior Administration Official said the Botnet Provision seeks “voluntary" cooperation from the Private Sector "to reduce significantly botnet attacks".

There is also a Section on Improving the Country’s Ability to Deter Cyberattacks and working with International Partners to build Cyber Norms.

Bossert said the failure to create such a "deterrence posture" was a major shortcoming of the Obama Administration. “I think the last administration should have done that, had an obligation, and didn’t," he told reporters, echoing criticisms leveled by many on Capitol Hill.

The Order has been widely seen as an opening salvo in the Fight to Lock Down Government Networks. Amit Yoran, the CEO of Cybersecurity firm Tenable, called it an "important step" that "has the potential to force federal agencies to rethink their security strategies."

Still, today's signing is unlikely to quell all doubts from Cyber Specialists that the White House is up to the daunting task of Securing the Government’s aging Networks. Outside Experts are particularly worried that the Administration still lacks Appointees in key Cyber Posts at DHS and elsewhere.