Taking the mystery out of cyberwar

[Commentary] If the United States ever faced a genuine conflict in cyberspace, with decisions having to be made at network speed against adversaries unknown or hard to find, who would be in charge?

A major attempt to sort this out at the highest levels is evident in President Policy Directive 20, which President Obama signed last October. Presidential approval is required for cyber-operations if they might result in “significant consequences,” which include loss of life, serious levels of retaliation, damage to property, adverse foreign policy consequences or economic impact on the country. Wisely, cyberweapons are being put in a category with nuclear weapons, not to be fired off by a field commander without authority. There’s an exception for emergency actions.

The directive is still classified as top secret but was among the papers spilled into public view by Edward Snowden, the contractor for the National Security Agency who also revealed classified materials on Internet and telephone surveillance. Certainly, this leak must have pained the White House. But on balance, it is a good sign that the imponderables of fighting a cyberwar are being examined and clarified. Better now, before trouble arrives, than in the midst of crisis or after conflict has broken out.