Trump Signs US Cyber Strategy for Defensive, Offensive Efforts

President Donald Trump signed a national cyber strategy to coordinate defensive and offensive activities, National Security Adviser John Bolton said Thursday. The strategy was finalized in connection with rescinding an Obama-era directive requiring interagency coordination on offensive U.S. cyberattacks. Bolton called the reversal a warning sign for adversaries like China, Russia, Iran and North Korea. It's the first “fully articulated cyber strategy in 15 years,” Bolton said. Presidential policy directive 20, in 2012 by President Barack Obama, established an interagency framework for approving U.S. cyberattacks. The administration eliminated that directive several weeks ago, Bolton told reporters. The U.S. no longer has its hands tied, he said: “We’re going to do a lot of things offensively, and I think our adversaries need to know that. ... We’re not just on defense as we have been primarily.” U.S. Cyber Commander Paul Nakasone, Homeland Security Secretary Kirstjen Nielsen, Director of National Intelligence Dan Coats and FBI Director Christopher Wray agreed on the change Bolton said. The new plan recognizes public and private sectors have struggled to secure systems, said Bolton. Overcoming those challenges will require technical advances and a thriving tech sector, Bolton added. He cited the WannaCry cyberattack and a recent attack against Atlanta as evidence threats aren't going away. The 2015 Office of Personnel Management data breach is one type of attack the U.S. is looking to deter, Bolton said. Asked about the administration eliminating the top cyber policy adviser position (see 1805160046), Bolton said he inherited a duplicative staffing structure. Numerous senior directors -- for defense and intelligence, for example -- don't have coordinators, he said. The strategy emphasizes “promoting American prosperity,” “preserving peace through strength,” “advancing American influence” and securing a “cyber future.” It's an extension of Trump’s May 2017 cybersecurity executive order, the White House said. DOD said Tuesday the U.S. needs to collect intelligence in cyberspace to combat malicious efforts by China and Russia, which pose an unacceptable risk to the U.S. North Korea and Iran pose similar threats, officials said.