Start your day with intelligence. Get The OODA Daily Pulse.
Nate Fick serves as the inaugural U.S. Ambassador at Large for Cyberspace and Digital Policy, leading the State Department’s Bureau of Cyberspace and Digital Policy (CDP, which was launched in 2022). In this post: a look at the ongoing Cyber and Tech Diplomacy initiatives and operational successes of the CDP under Fick.
Congress gave America’s first cyber ambassador tens of millions of dollars to help other countries respond to hacks and expand secure internet access, and he has a grand vision for how to spend it. The government funding bill that President Joe Biden signed in late March included $50 million for the State Department’s Cyberspace, Digital Connectivity and Related Technologies Fund, which lawmakers created in December.
Why it matters:
With bipartisan Congressional support, $50 million has been appropriated to the @StateDept’s Cyberspace, Digital Connectivity, and Related Technologies (CDT) Fund. This fund will allow the to deploy flexible, robust programming to int’l partners who need it most. pic.twitter.com/GDM5ll1SB6
— Bureau of Cyberspace and Digital Policy (@StateCDP) March 28, 2024
The Record | State Department cyber bureau preps funding blitz aimed at boosting allies’ defenses
The U.S. State Department’s cyber bureau is ready to shell out almost $35 million in foreign aid for an array of projects around the world, as Washington aims to boost the digital acumen of allies and take the lead in shaping international norms for cyberspace ahead of other countries like China. The spending spree marks a new era for the relatively young Bureau of Cyberspace and Digital Policy. Created by Congress in 2022 to strengthen U.S. cyber diplomacy against potential threats and deal with emerging technologies, such as artificial intelligence, the office has seen its foreign assistance accounts balloon from $17 million to over $90 million. Previously, Foggy Bottom relied on a hodgepodge of authorities, processes, and pots of money, including one-time grants, to help allied nations — especially Ukraine, Albania, and Costa Rica — enhance their cybersecurity after digital assaults.
“The impetus for going through all the effort and the bureaucratic process of creating these mechanisms has largely been based on real-world lessons looking at those places,” according to Nathaniel Fick, State’s ambassador-at-large for cyberspace and digital policy. “I wish we could have gotten dollars out the door a lot faster and selected vendors a lot more quickly.” He noted Albania in particular, where government services were knocked offline in 2022 following attacks by Iranian hackers. Fick and other U.S. diplomats were among the first on the ground in a show of solidarity with the NATO partner, but “it took months for the follow-on tech assistance to actually flow into place.” That commitment “would have been faster and more targeted had we had these tools. Now we do have the tools. So, in the future, our response will be faster and more targeted,” Fick told Recorded Future News in an interview last week.
In total, his agency will finalize contracts and agreements for nine projects by October 1—coinciding with the end of the current fiscal year—that range from rapid cyber incident response and countering the misuses of commercial spyware to better safeguarding undersea cables and increasing cloud-based security in the Pacific.
At this year’s RSA Conference, Secretary of State Anthony Blinken announced the release of the United States’ International Cyberspace and Digital Policy Strategy – which we assume was a policy effort led (within State and across all federal agencies) by the Bureau of Cyberspace and Digital Policy, where Nate Fick remains at the helm. The strategy “focuses on the concept of digital solidarity, which is a willingness to work together on shared goals, to stand together, to help partners build capacity, and to provide mutual support.” For Secretary Blinken’s RSA Conference Keynote Speech in May 2024, go to “Technology and the Transformation of U.S. Foreign Policy”
The Bureau of Cyberspace and Digital Policy (CDP) promotes U.S. national and economic security by leading, coordinating, and elevating foreign policy on cyberspace and digital technologies. It builds partnerships to shape the international environment so Americans and people everywhere can prosper. CDP strives for a world in which every person can access the opportunities that come with digital connectivity to build thriving economies and societies and works to counter challenges to this vision from authoritarian states. Recognizing the growing role of technology as a cross-cutting national security issue, the Department created CDP in April 2022 to lead and coordinate U.S. diplomacy on cyber and digital policy. The bureau addresses the national security challenges and economic opportunities presented by cyberspace and digital technologies and promotes standards and norms that are fair, transparent, and support the rights-respecting use of technology.
Through robust engagement in multilateral organizations and with the multistakeholder community, bilateral diplomacy with partners round the world, and encouragement of responsible and rights-respecting state behavior in cyberspace, CDP empowers U.S. leadership in cyber, digital, and technology diplomacy. As citizens around the world eagerly seek increased Internet connectivity to harness the tremendous opportunities afforded by the digital transformation, CDP leads, coordinates, and implements foreign assistance programs through the Digital Connectivity and Cybersecurity Partnership (DCCP) to promote open, interoperable, reliable, and secure digital economies across the globe. Through diplomacy, international cooperation, foreign assistance, and deterrence, the United States continues to advance an affirmative positive vision of technology as a tool that supports that promotes collective security, prosperity, and democratic values.
See also:
For more News Briefs and Original Analysis about the efforts of the State Department and the Bureau of Cyberspace and Digital Policy, see OODA Loop | State Department
Cyber War: Power, Prestige, International Governance, and Strategy in the Age of Global Polycrisis: Competing cyber capabilities (on a spectrum from nation-state to non-state actors alike) and cyber-based conflict will continue to restructructure, reformulate, discombobulate, and transform the very essence of what power, prestige, international governance, and geopolitical strategy are in the 21st century. Fueled by the Global Polycrisis, Cyberwars will continue to take center stage.
Corporate Board Accountability for Cyber Risks: With a combination of market forces, regulatory changes, and strategic shifts, corporate boards and their directors are now accountable for cyber risks in their firms. See: Corporate Directors and Risk
Geopolitical-Cyber Risk Nexus: The interconnectivity brought by the Internet has made regional issues affect global cyberspace. Now, every significant event has cyber implications, making it imperative for leaders to recognize and act upon the symbiosis between geopolitical and cyber risks. See The Cyber Threat
Challenges in Cyber “Net Assessment”: While leaders have long tried to gauge both cyber risk and security, actionable metrics remain elusive. Current metrics mainly determine if a system can be compromised, without guaranteeing its invulnerability. It’s imperative not just to develop action plans against risks but to contextualize the state of cybersecurity concerning cyber threats. Despite its importance, achieving a reliable net assessment is increasingly challenging due to the pervasive nature of modern technology. See: Cyber Threat
Embracing Corporate Intelligence and Scenario Planning in an Uncertain Age: Apart from traditional competitive challenges, businesses also confront external threats, many of which are unpredictable. This environment amplifies the significance of Scenario Planning. It enables leaders to envision varied futures, thereby identifying potential risks and opportunities. All organizations, regardless of their size, should allocate time to refine their understanding of the current risk landscape and adapt their strategies. See: Scenario Planning