President Trump signed today a long-awaited Executive Order on Cybersecurity. I think it is mostly a non-event. There are some helpful provisions, including a requirement that government agencies implement the NIST Framework. Otherwise, it requires a series of executive reports on cybersecurity preparedness, generally within 90 days of the Order. As others have noted, those reports are likely to show that government cybersecurity is significantly lacking because of outdated infrastructure. The real test will come when changes must be implemented and government cyber infrastructure moves towards a more centralized cloud-based model.
The text of the Order is below.
[google-drive-embed url=”https://drive.google.com/file/d/0BzS0leqU862xVGNIR3ZWdGI1eDQ/preview?usp=drivesdk” title=”Trump-cybersecurity-executive-order.pdf” icon=”https://drive-thirdparty.googleusercontent.com/16/type/application/pdf” width=”100%” height=”400″ style=”embed”]