1.1

1 Issue an Updated National Cyber Strategy

1.1

1 2020 Report

2021

2022

2023

Implemented

On March 2, 2023, the Biden administration issued the National Cybersecurity Strategy. The Office of the National Cyber Director led the drafting of the strategy with input from cybersecurity experts inside and outside of government. The strategy includes five pillars: defend critical infrastructure; disrupt and dismantle threat actors; shape market forces to drive security and resilience; invest in a resilient future; and forge international partnerships to pursue shared goals. The administration then issued a “roadmap” for executing the strategy, detailing 65 initiatives led by 18 departments and agencies over the next three fiscal years. Acting National Cyber Director (NCD) Kemba Walden called the National Cybersecurity Strategy Implementation Plan a “living document,” anticipating adjustments to the plan “in response to changing cyber threat landscape.”

Status Summary

In Progress

View Details

1.1.1

1 Develop a Multitiered Signaling Strategy

'21

'22

'23

View Details

1.1.2

1 Promulgate a New Declaratory Policy

'21

'22

'23

2020 Report

View Details

1.2

1 Create House Permanent Select and Senate Select Committees on Cybersecurity

'21

'22

'23

2020 Report

View Details

1.2.1

1 Re-establish the Office of Technology Assessment

'21

'22

'23

2020 Report

View Details

1.3

1 Establish a National Cyber Director Position

'21

'22

'23

2020 Report

Implemented

1.3

1 2020 Report

2021

2022

2023

Implemented

After serving 17 months as the inaugural cyber advisor to the president, NCD Chris Inglis announced his departure from the position in February 2023. Despite letters from the commission co-chairs, other members of Congress, and private industry urging the swift nomination of a replacement, the administration did not announce the nomination of Harry Coker, Jr. as the next NCD until July. In the interim, Kemba Walden, the principal deputy NCD, has served admirably as acting director. Should the absence of a Senate-confirmed NCD persist, this recommendation would be considered only partially implemented.

Status Summary

Legislation Passed in FY21 NDAA; NCD Nominated and Confirmed

View Details

1.4

1 Strengthen the Cybersecurity and Infrastructure Security Agency

'21

'22

'23

2020 Report

Implemented

1.4

1 2020 Report

2021

2022

2023

Implemented

Congress has continued to equip CISA with appropriate funding and resources to carry out its responsibilities. The FY23 omnibus spending bill included $2.097 billion for CISA, which is $313 million above the FY22 enacted amount, or a 12 percent increase. At the annual DEFCON conference this year, CISA Director Jen Easterly noted that she has the authorities she needs thanks to the CSC. In terms of resources, Congress has consistently provided CISA with the increased appropriations it needs to be successful. A provision to establish a five-year term for the CISA director, however, has failed to pass Congress despite its inclusion in the House version of the FY23 NDAA. Additionally, legislation to codify CISA as the national risk management agency has also faced hurdles to implementation but has been attempted in both 2022 and 2023.

Status Summary

Legislation Passed in FY21 NDAA; Appropriations in FY21 and FY22

View Details

1.4.1

1 Codify and Strengthen the Cyber Threat Intelligence Integration Center

'21

'22

'23

2020 Report

View Details

1.4.2

1 Strengthen the FBI’s Cyber Mission and the National Cyber Investigative Joint Task Force

'21

'22

'23

2020 Report

Nearing Implementation

1.4.2

1 2020 Report

2021

2022

2023

Implemented

In January, CISA’s Joint Cyber Defense Collaborative (JCDC) released its 2023 Planning Agenda, which notes that JCDC will lead the drafting of the National Cyber Incident Response Plan (NCIRP). This announcement shows progress toward implementing the commission’s original recommendation. The NCIRP must incorporate two elements: 1) outlining how federal, state, local, tribal, and territorial governments and private entities respond to significant cyber incidents affecting critical infrastructure, and 2) identifying options and resources to supplement the government’s response. Integrating the two into existing emergency response and disaster recovery mechanisms is crucial.

Status Summary

Appropriations Proposed

View Details

1.5

1 Diversify and Strengthen the Federal Cyberspace Workforce

'21

'22

'23

2020 Report

Nearing Implementation

1.5

1 2020 Report

2021

2022

2023

Implemented

Cybersecurity programs face recurring budgetary constraints, but there were various opportunities for increased funding in FY23. The passage of the CHIPS and Science Act last year provided increased resources for the federal cyber workforce programs. In March, the Office of Personnel Management published implementation guidance on the Federal Rotational Cyber Workforce Program, which allows federal employees to gain exposure to different cybersecurity and IT-related job functions through rotations to other federal agencies. Meanwhile, on Capitol Hill, the Senate Homeland Security and Governmental Affairs Committee passed the Federal Cybersecurity Workforce Expansion Act out of committee in July. If signed into law, the legislation would create a cybersecurity-focused upskilling pilot program at the Department of Veterans Affairs for service members transitioning to civilian life and a cybersecurity apprenticeship program within CISA. Most significantly, the Office of the National Cyber Director published the National Cyber Workforce and Education Strategy with four core tenets focused on awareness, education, and the national and federal workforces. In light of these actions, this recommendation is considered fully implemented, but cybersecurity workforce development must be a long-term effort that continues far past the specific recommendations made here.

Status Summary

Partial Implementation via Legislation Passed in FY21 NDAA; Further Legislation and Appropriations Required

View Details

Cyberspace Solarium Commission Recommendations Tracker

Implementation Status

Related Links

Breakdown by Pillars

LAYER 2 - DENY BENEFITS

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

LAYER 2 - DENY BENEFITS

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

Assessment Data

Show Filters

Hide Filters

1.1

1

2020 Report

Issue an Updated National Cyber Strategy

'21

'22

'23

1.1

1

2020 Report

Issue an Updated National Cyber Strategy

Nearing Implementation

Nearing Implementation

Status Summary

Implemented

Status Summary

1.1.1

1

Develop a Multitiered Signaling Strategy

'21

'22

'23

1.1.1

1

Develop a Multitiered Signaling Strategy

On Track

On Track

Status Summary

Implemented

Status Summary

1.1.2

1

2020 Report

Promulgate a New Declaratory Policy

'21

'22

'23

1.1.2

1

2020 Report

Promulgate a New Declaratory Policy

Limited Progress

On Track

Status Summary

Implemented

Status Summary

1.2

1

2020 Report

Create House Permanent Select and Senate Select Committees on Cybersecurity