Experts debate US national cyber strategy priorities
Atlantic Council panel of cyber policy experts discusses what should shape the upcoming US national cyber strategy, citing SolarWinds and Colonial Pipeline as cautionary examples.
Sourceatlanticcouncil.org — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
This is an opinion/discussion piece from the Atlantic Council's Cyber Statecraft Initiative, presenting five cybersecurity policy experts' views on the structure, goals, and measures of success for a future US national cyber strategy, prompted by the UK's newly published Government Cyber Security Strategy and anticipation of a US equivalent. The panelists—including Jason Healey, Joshua Rovner, Emma Schroeder, Camille Stewart, and Heli Tiirmaa-Klaar—debate topics such as public-private collaboration, offense/defense balance, measuring strategic effectiveness, and organizational roles across government agencies.
Notable threat references are used illustratively rather than as new reporting: Tiirmaa-Klaar cites the 2020 SolarWinds supply-chain compromise (attributing the intrusion to Sandworm, though mainstream attribution for that specific campaign is APT29/Cozy Bear) and the 2021 Colonial Pipeline ransomware incident as evidence of insufficient private-sector cybersecurity investment in the United States. Estonia's resilience to the 2017 NotPetya ransomware outbreak is offered as a positive case study of rigorous patching and public-private threat-sharing. The article is fundamentally a policy and strategy discussion piece with no new technical findings, indicators, or active threat campaigns described.
Mentioned in this report
Source reporting: https://www.atlanticcouncil.org/content-series/the-5x5/the-5x5-whats-in-a-cyber-strategy
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors and malware it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs