3.1.1

3 Establish a National Risk Management Cycle Culminating in a Critical Infrastructure Resilience Strategy

3.1.1

3 2020 Report

2021

2022

2023

On Track

At this time, there remains limited executive action toward directing a federally funded research and development center to develop a training and certification program for insurance professionals.

Status Summary

Legislation Proposed

View Details

3.1.2

3 Establish a National Cybersecurity Assistance Fund

3.2

3 Develop and Maintain Continuity of the Economy Planning

3.2

3 2020 Report

2021

2022

2023

Nearing Implementation

In FY21 and FY22 appropriations, Congress indicated that it prefers to increase funding for the Government Accountability Office (GAO) and the Congressional Research Service (CRS) over re-establishing the Office of Technology Assessment. The GAO’s FY24 budget request to Congress notes that funding increases will allow the office to “maximize… science and technology reporting capabilities.” The CRS’s FY24 budget also requests a $13 million increase over FY23 enacted levels, a nearly 10 percent increase. These budget increases may suffice to fill the gap left by the loss of the Office of Technology Assessment.

Status Summary

Legislation Passed in FY21 NDAA; Further Appropriations Required

View Details

3.3

3 Codify a “Cyber State of Distress” Tied to a “Cyber Response and Recovery Fund”

'21

'22

'23

2020 Report

Implemented

3.3

3 2020 Report

2021

2022

2023

Implemented

As noted in last year’s assessment, the Biden administration re-established the Cyber Threat Intelligence Integration Center (CTIIC) at the Office of the Director of National Intelligence. The National Cybersecurity Strategy calls upon sector risk management agencies to work with CTIIC, CISA, and law enforcement agencies to “identify intelligence needs and priorities within their sectors.” The Intelligence Authorization Act, passed as part of the FY22 spending omnibus, calls for a “report on the potential to strengthen all-source intelligence integration relating to foreign cyber threats.” Full implementation of this recommendation will require action in response to the mandated report.

Status Summary

Legislation Passed; Funding Appropriated

View Details

3.3.1

3 Designate Responsibilities for Cybersecurity Services Under the Defense Production Act

'21

'22

'23

2020 Report

View Details

3.3.2

3 Clarify Liability for Federally Directed Mitigation, Response, and Recovery Efforts

'21

'22

'23

2020 Report

View Details

3.3.3

3 Improve and Expand Planning Capacity and Readiness for Cyber Incident Response and Recovery Efforts

'21

'22

'23

2020 Report

On Track

3.3.3

3 2020 Report

2021

2022

2023

Nearing Implementation

This recommendation was partially implemented through appropriations from the Infrastructure Investment and Jobs Act to the Department of Homeland Security’s Science and Technology Directorate. In April, based on this recommendation, Representative Ritchie Torres (D-NY) also introduced the Critical Technology Security Centers Act of 2023, which would establish and fund two centers to test the security of devices, identify vulnerabilities, and develop mitigation measures to certify secure technologies.

Status Summary

Executive Action Underway; Further Action Required

View Details

3.3.4

3 Expand Coordinated Cyber Exercises, Gaming, and Simulation

3.3.5

3 Establish a Biennial National Cyber Tabletop Exercise

3.3.6

3 Clarify the Cyber Capabilities and Strengthen the Interoperability of the National Guard

Cyberspace Solarium Commission Recommendations Tracker

Implementation Status

Related Links

Breakdown by Pillars

LAYER 2 - DENY BENEFITS

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

LAYER 2 - DENY BENEFITS

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

Pillar 1

Pillar 2

Pillar 3

Pillar 4

Pillar 5

Pillar 6

White Papers

Assessment Data

Show Filters

Hide Filters

3.1.1

3

2020 Report

Establish a National Risk Management Cycle Culminating in a Critical Infrastructure Resilience Strategy

'21

'22

'23

3.1.1

3

2020 Report

Establish a National Risk Management Cycle Culminating in a Critical Infrastructure Resilience Strategy

Nearing Implementation

On Track

Status Summary

On Track

Status Summary

3.1.2

3

2020 Report

Establish a National Cybersecurity Assistance Fund

'21

'22

'23

3.1.2

3

2020 Report

Establish a National Cybersecurity Assistance Fund

On Track

Limited Progress

Status Summary

On Track

Status Summary

3.2

3

2020 Report

Develop and Maintain Continuity of the Economy Planning

'21

'22

'23

3.2

3

2020 Report

Develop and Maintain Continuity of the Economy Planning

Implemented

Nearing Implementation

Status Summary

Nearing Implementation

Status Summary

3.3

3