The Cyberspace Solarium Commission, a group of government and non-government cyber experts, will recommend Congress increase the power of the executive branch in responding to significant cyber events, create a cyber emergency fund and strengthen the federal government\u2019s relationship with the private sector.<\/p>\n\n\n\n
While commissioners have refused to offer specific details about their recommendations until the report is released later this month, four commissioners attending a Foundation for the Defense of Democracies event March 5 discussed concepts included in the report.<\/p>\n\n\n\n
Rep. Mike Gallagher, R-Wisc. and co-chair of the commission, said the group wants to give the president the authority to declare a \u201ccyber state of distress\u201d which would unlock access for a \u201ccyber response and recovery fund.\u201d<\/p>\n\n\n\n
\u201cThis new mechanism … would allow states, local, tribal and territorial governments access to enhanced federal expertise and resources that they currently don\u2019t have right now,\u201d Gallagher said.<\/p>\n\n\n\n
The commission will release 75 cyber policy recommendations March 11 to reshape how the federal government approaches cyber issues. The report is expected to cover how cyber jurisdictions are organized inside the federal government to the role of the private sector in cyber deterrence.<\/p>\n\n\n\n
While there is also debate about whether the federal government should centralize which agencies have jurisdiction on with cybersecurity said, commissioners indicated that the report will not recommend a standalone cybersecurity agency.<\/p>\n\n\n\n
Suzanne Spaulding, a commissioner and former top cyber official at the Department of Homeland Security, said that sector specific agencies should retain their cyber jurisdictions because cyber issues touch every aspect of life in the United States. In order to manage risk and mitigate threats, federal agencies must serve as sector-specific risk management experts.<\/p>\n\n\n\n
\u201cYou really need deep sector expertise to be able to do that … your IT specialist can no more tell you about the impact on your business from a significant cyber incident than the electrician can tell you the impact on your business if the power goes out,\u201d Spaulding said. \u201cYou need that sector-specific expertise.”<\/p>\n\n\n\n
Meanwhile, the report aims to lay out an effective deterrence strategy. Commissioners see the private sector as a primary partner and one with sector-specific expertise.<\/p>\n\n\n\n
The report will detail the steps the federal government needs to take to strengthen relationships with the private sector to better understand cyber threats. One ongoing challenge is that while the government needs to protect critical infrastructure, such as utilities, they are largely run by private companies.<\/p>\n\n\n\n
\u201cSo much of what we need to know resides in the private sector,” said Samantha Ravich, chairman of FDD\u2019s Center on Cyber and Technology Innovation and a commissioner. \u201cAnd until this point in time there\u2019s been a disconnect between … how [the government think[s] about the threat and how they prioritize what needs to be done about it, and how the private sector is battling its way in this battle space with, frankly, not all the tools it needs to be able to protect itself.\u201d<\/p>\n\n\n\n
Ravich also said members discussed the role of military cyber reserves. While reservists would work in the private sector in peacetime, calling them up for duty would likely mean the United States was involved in an overseas conflict. But that raised a key question for commissioners.<\/p>\n\n\n\n
\u201cDo we want these people, now with the military, to be deployed overseas when we have rolling outages?,” Ravich said. \u201cSo maybe the best place for them is still working\u201d in the private sector.<\/p>\n","protected":false},"excerpt":{"rendered":"
In another preview of its March 11 report, the Cyberspace Solarium Commission laid out new authorities, roles and partnerships it wants to see in the federal government.<\/p>\n","protected":false},"author":7,"featured_media":53978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,31,110,14,33],"tags":[],"coauthors":[3242],"class_list":["post-26774","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-it-cloud-report","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"X5GMC3VNP5HS3JXNSDCMHTHHLI","arc_canonical_url":"\/congress\/capitol-hill\/2020\/03\/05\/panel-will-recommend-that-feds-can-declare-a-cyber-state-of-distress\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n