Cyberspace Solarium lauds NDAA’s stellar cyber provisions

December 17, 2023
1 min read

The annual U.S. National Defense Authorization Act (NDAA) has been praised by the co-chairs of the Cyberspace Solarium Commission (CSC) for incorporating recommendations from its 2020 report. The $886 billion defense spending bill includes measures supported by the Commission, such as a pilot program for a Civilian Cybersecurity Reserve and enhancing the cybersecurity of the systems and networks supporting the nuclear command. Furthermore, the bill includes CSC priorities related to military cybersecurity cooperation with Taiwan and the establishment of a continuity of the economy plan to deal with a destructive cyber attack causing significant economic disruption.

  • The CSC’s 2020 report contained more than 80 recommendations, with nearly 70% of them set to be enacted once the Defense bill becomes law.
  • The CSC was launched under a previous annual defense bill to develop consensus on a strategic approach to defending the United States in cyberspace.
  • Among the CSC’s warnings was that increasing digital connections and data exchanges provide adversaries with more opportunities to disrupt critical infrastructure and damage institutions.

CSC co-chairs Sen. Angus King and Rep. Mike Gallagher said the security of the country’s nuclear command and communications mission is vital and that the “NDAA’s focus on bolstering its cyber resiliency is wise and timely.” They also stated that the NDAA gets the groundwork into place for creating a continuity of the economy plan, which they have long advocated for.

Upon the bill’s signing into law by President Biden, 58 of the Commission’s 82 recommendations will have been enacted. However, the signing is pending the removal of controversial measures in the bill, such as restricting service members’ access to abortion and transgender healthcare.

Latest from Blog

EU push for unified incident report rules

TLDR: The Federation of European Risk Management Associations (FERMA) is urging the EU to harmonize cyber incident reporting requirements ahead of new legislation. Upcoming legislation such as the NIS2 Directive, DORA, and