**
Trump Admin to Revisit Bedrock Cyber Policies as it Implements New Strategy
**The White House is gearing up to release a comprehensive cybersecurity strategy, one that will not only reshape the nation's approach to cyber defense but also revisit some of the bedrock policies that govern U.S. cyber operations and responses to major cyberattacks from foreign adversaries.
According to four individuals familiar with the matter, the forthcoming strategy will include an offensive pillar focused on "preemptive erosion" of foreign adversaries' hacking attempts. This pillar aims to be more proactive in cyberspace, including by resetting foreign adversaries' risk calculus and leaning into partnerships with the private sector to aid in this work.
**
The six-pillar strategy, which is set for release in January, will focus on:**
* Taking steps to preempt foreign adversaries' hacking capabilities * Reforming cybersecurity regulations to reduce compliance burdens * Modernizing federal networks * Securing critical infrastructure * Encouraging superiority in emerging technologies and building a business-driven cyber talent pipeline
Implementation steps for the Trump administration's forthcoming cyber strategy will also include reexamining policies like:
* NSPM-13, a classified document that governs what agencies can launch cyber operations and how they are authorized * PPD-41, which governs what happens when a major cyber incident hits U.S. soil, including lead agencies and coordination structures * NSM-22, which sets standards for protecting critical infrastructure across various sectors
**
Executive Orders Focused on Cybercrime and Ransomware Groups are in the Works
**In addition to revisiting bedrock policies, executive orders focused on cybercrime and ransomware groups are being arranged. These orders will aim to address the growing threat of these types of attacks, which have become increasingly prevalent in recent years.
**
The Offensive Pillar: "Preemptive Erosion" of Adversaries' Hacking Capacity
**The offensive pillar of the strategy focuses on reshaping adversary behavior by being more proactive in cyberspace. This includes resetting foreign adversaries' risk calculus and leaning into partnerships with the private sector to aid in this work.
**
The Role of the Private Sector in National Cyber Operations
**Debates over the role of the private sector in national cyber operations have included proposals to grant companies authority to conduct offensive cyber activity against adversaries. The concept has been discussed between U.S. officials and the private sector, though sources acknowledge that any modern framework would be more constrained than those used in past centuries.
**
The Defensive Side: Quantum-Safe Security Measures and "Zero Trust" Tools
**On the defensive side of the strategy, the White House will focus on pushing agencies to adopt quantum-safe security measures. This is part of an effort aimed at ensuring encrypted government networks remain secure even as future quantum computers gain the ability to crack today's encryption standards.
**
The Critical Infrastructure Pillar: Moving Away from Chinese Technology
**The critical infrastructure pillar would focus heavily on moving away from Chinese technology, building on prior efforts to jettison China-linked telecom hardware from U.S. networks.
**
A New Approach to Cybersecurity Career Development and Education
**A venture capital component for funding cyber startups is also being crafted in tandem with these goals. An executive order implementing the cyber strategy is also planned, according to an industry document, and is expected to be much shorter than its Biden-era equivalent released in 2023.
The White House's new approach to cybersecurity reflects a growing recognition of the need for a more proactive and comprehensive strategy to address the evolving threats facing the nation. By revisiting bedrock policies and incorporating innovative approaches, the Trump administration aims to make Americans, and our vital infrastructure, networks, and information secure in cyberspace.