Cyberspace Solarium Commission Praises NDAA’s Stellar Cyber Provisions

December 17, 2023
1 min read

Key points:

  • The Cyberspace Solarium Commission (CSC) praised the U.S. National Defense Authorization Act for incorporating recommendations from its 2020 report into the annual defense bill.
  • The defense bill includes measures to enhance the cybersecurity of the systems supporting the nuclear command, establish a Civilian Cybersecurity Reserve, and increase military cybersecurity cooperation with Taiwan.

The Cyberspace Solarium Commission commended the annual U.S. National Defense Authorization Act for making strides in the field of cybersecurity. The Act, in line with most of the CSC’s propositions in the 2020 report, is set to become law, and will include measures to improve the cybersecurity of the systems and networks controlling nuclear command. Additional measures include the establishment of a Civilian Cybersecurity Reserve and a boost in military cybersecurity collaboration with Taiwan.

CSC co-chairs Sen. Angus King and Rep. Mike Gallagher recognized the importance of securing the nuclear command systems, referring to it as, “existentially important.” The CSC noted that the National Defense Authorization Act (NDAA) sets off the process for the establishment of a continuity of the economy plan. This would be crucial in the scenario of a severe cyber attack, leading to a major disturbance in the economy.

Established under a prior annual defense bill, CSC was given the task to build “a consensus on a strategic approach to defending the United States in cyberspace against cyberattacks of significant consequences.” Following the forthcoming passage of this year’s defense bill, over 70% of the CSC’s propositions will have become law, symbolising meaningful advancements in cybersecurity across the United States.

Latest from Blog

Apache’s OFBiz gets new fix for RCE exploits

TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code