Cyberspace Solarium Commission Urges Cybersecurity Approach Overhaul

The U.S. Cyberspace Solarium Commission urged the federal government Wednesday to make major changes to its cybersecurity approach, including creating a Senate-confirmed national cyber director and a Bureau of Cyber Statistics. CSC urged the government to establish a special fund for cyberattack response and recovery efforts and said Congress should create stand-alone House and Senate cybersecurity committees, which has been sought for years (see 1403270046). “For over 20 years, nation-states and non-state actors have used cyberspace to subvert American power,” the commission reported. “Despite numerous criminal indictments, economic sanctions, and the development of robust cyber and non-cyber military capabilities, the attacks against the United States have continued.” CSC didn’t seek a unified federal cybersecurity agency, saying the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, the State Department, Election Assistance Commission and other federal agencies with cyber responsibilities should partly restructure. “We want working at CISA to become so appealing to young professionals interested in national service that it competes with the NSA, the FBI, Google, and Facebook for top-level talent (and wins)," the CSC said. It recommended the Commerce Department to establish a National Cybersecurity Certification and Labeling Authority and State to have an assistant secretary focused on cybersecurity issues. CSC Commissioner and House Armed Services Emerging Threats Subcommittee Chairman Jim Langevin, D-R.I., said "our strategy of layered cyber deterrence will provide solid guidance for transformational reforms.” House Homeland Security Committee ranking member Mike Rogers, R-Ala., and Cybersecurity Subcommittee ranking member John Katko, R-N.Y., hailed the report. It represents “thoughtful and actionable ideas,” Rogers said. The "serious, forward-leaning recommendations" can help ensure critical infrastructure can "better defend against advanced cyber threats," said BSA|The Software Alliance Senior Director-Policy Tommy Ross. "Not everyone will like every recommendation the Commission produced, but our hope is that the report will create a sense of urgency for Congress to take meaningful, bipartisan action.”