{"id":1754,"date":"2024-09-25T06:35:30","date_gmt":"2024-09-25T06:35:30","guid":{"rendered":"https:\/\/xdr-mdr.lmntrix.com\/main_web\/?p=1754"},"modified":"2024-10-18T17:29:06","modified_gmt":"2024-10-18T17:29:06","slug":"actions-speak-louder-than-words-trump-cyber-strategy-at-odds-with-reality","status":"publish","type":"post","link":"https:\/\/lmntrix.com\/blog\/actions-speak-louder-than-words-trump-cyber-strategy-at-odds-with-reality\/","title":{"rendered":"Actions speak louder than words; Trump Cyber Strategy at odds with reality"},"content":{"rendered":"
\n
\"polling\"
polling<\/figcaption><\/figure>\n<\/div>\n\n\n

When then-presidential candidate Donald Trump promised a comprehensive cybersecurity plan in 2016, it was pitched as a guard against the threat of cyber attacks on critical infrastructure \u2013 from power grids, to government agencies and election systems.

Now, with midterms around the corner, the National Cyber Strategy<\/a> has been released but a number of actions illustrate a disconnect between the strategy\u2019s words and the administration\u2019s actions. 

In March, the Office of Management and Budget reported that 74 percent<\/a> of the 96 agencies it assessed were either \u201cAt Risk\u201d or \u201cHigh Risk\u201d of a security breach. 

More recently, nearly 85 percent of cybersecurity professionals at the Black Hat security conference agreed cyberattacks on the midterms<\/a> were likely. 

Despite this, the administration killed key cyber positions, repealed a directive to balance offensive cyber attacks, and refused additional funds for election systems around the country.

Whether this disregard is rooted in ignorance or is a more calculated form of neglect is yet to be seen, but the outcome is the same; critical systems are at risk.

Musical Chairs <\/strong>

Cybersecurity positions at the White House are a game of musical chairs – not so much because people\u2019s positions change, but because seats are removed from the game. 

Cybersecurity czar Tom Bossert and coordinator Rob Joyce were forced out<\/a> of the White House, with their responsibilities shifted to two National Security Council senior directors. The U.S. State Department has also left the position of cyber ambassado<\/a>r unfilled.

Despite this, the National Cyber Strategy identifies \u201crefining roles and responsibilities\u201d as one of its priorities, calling for \u2018clarity\u2019 and \u2018coordination\u2019 of the roles of Federal agencies in addressing cyber threats to the U.S.  

Defending Democracy<\/strong>

In mid-July, Congress excluded new funds<\/a> for improving election security from its spending bill. The funds would have added millions of dollars to help states improve voting systems and administer elections. 

September\u2019s National Cyber Strategy highlights \u201cProtecting our Democracy\u201d as a priority, promising increased training and support for state and local government officials \u201cwhen requested\u201d.

Attacks against voting infrastructure<\/a> have been confirmed, and the refusal to bolster already compromised infrastructure is – to put it mildly – concerning. One case, against the Illinois State Board of Elections, illustrates the level of vulnerability \u2013 asked about the Board\u2019s ability to defend itself, an executive characterized the fight as \u201cbows and arrows against the lightning\u201d. 

Leading with the Chin<\/strong>

In August, President Trump reversed Presidential Policy Directive 20 (PPD-20). This laid out a complicated interagency process for deploying cyber weapons against adversaries. 

Pulling back PPD-20 means the gloves are off and offensive cyber capabilities can be deployed more easily. The cyber strategy codifies this, giving agencies such as the NSA greater remit to conduct offensive cyber attacks<\/a>.  

Certainly, revisiting how the U.S. should respond to threats is important, but the U.S. is not prepared to defend its key infrastructure from targeted cyberattacks. At its apparent state of readiness, conducting any kind of offensive cyber warfare would have severe repercussions, while the attacks against the U.S that are already succeeding will continue to succeed. As in boxing, if you keep your guard down it\u2019ll be a short bout \u2013 no matter how many haymakers you throw.  

What we know is that the federal government has displayed an alarming lack of commitment to election security as a crucial midterm election approaches, even though it\u2019s been made plain that bad actors will attempt to breach or influence<\/a> those systems.

So now, with the midterm elections looming, the cyber strategy has all the right words, but no one seems to be singing them. 

<\/p>\n","protected":false},"excerpt":{"rendered":"

When then-presidential candidate Donald Trump promised a comprehensive cybersecurity plan in 2016, it was pitched as a guard against the threat of cyber attacks on critical infrastructure – from power grids, to government agencies and election systems. Now, with midterms around the corner, the National Cyber Strategy has been released but a number of actions […]<\/p>\n","protected":false},"author":1,"featured_media":1755,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1754","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/comments?post=1754"}],"version-history":[{"count":4,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1754\/revisions"}],"predecessor-version":[{"id":4139,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1754\/revisions\/4139"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/media\/1755"}],"wp:attachment":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/media?parent=1754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/categories?post=1754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/tags?post=1754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}