Remarks of Assistant Secretary Redl at the National Security Telecommunications Advisory Committee (NSTAC) Meeting

A year ago, President Donald Trump issued an Executive Order aimed at strengthening the cybersecurity of federal networks and critical infrastructure.  The order mandated that all federal agencies use the Cybersecurity Framework developed by the National Institute of Standards and Technology. In April, NIST released version 1.1 of the Framework, which shows how this voluntary approach can provide a first line of cyber defense for companies.

Several broad themes emerged from our work over the past year: Attacks are a global challenge for the entire Internet ecosystem, and cannot be solved in isolation. We must collaborate across sectors and involve all stakeholders in finding workable solutions. And we must work closely with international partners, as the majority of compromised devices in recent botnet attacks have been located outside the United States. Many of the tools necessary for a more resilient Internet already exist, but aren’t widely used. We need to increase awareness and education, and help align market incentives to promote a better balance between security and convenience.  The administration will work with the private sector to coordinate on our plans based on the report’s recommendations.