Start your day with intelligence. Get The OODA Daily Pulse.
At this year’s RSA Conference a few weeks ago, Secretary of State Anthony Blinken announced the release of the United States’ International Cyberspace and Digital Policy Strategy – which we assume was a policy effort led (within State and across all federal agencies) by the Bureau of Cyberspace and Digital Policy, where Nate Fick remains at the helm. The strategy “focuses on the concept of digital solidarity, which is a willingness to work together on shared goals, to stand together, to help partners build capacity, and to provide mutual support. Find the details of the strategy here.
As summarized by Recorded Future News: “U.S. Secretary of State Antony Blinken announced an international cyber strategy on Monday outlining how the federal government plans to engage the rest of the world on a range of technological security issues. The plan is designed to guide the ways the Biden administration will ‘work with allies, partners, and stakeholders across the globe to shape the design, development, governance, and use of cyberspace and digital technologies.’ Why it matters:
“Technology issues are woven into nearly every aspect of our bilateral, multilateral and functional diplomacy, from economic growth to human rights to issues of military force. This strategy leads with digital solidarity as a necessary framework because nobody can address these issues alone. Digital solidarity is the willingness to work together on shared goals, to strive for aligned regulations and standards, to help partners build capacity, and to provide mutual support. We need to do that among states, of course, but also with companies and civil society organizations in a true multi-stakeholder partnership.”
– U.S. AMBASSADOR AT LARGE FOR CYBERSPACE AND DIGITAL POLICY NATHANIEL C. FICK
The United States released the International Cyberspace and Digital Policy Strategy: Towards an Innovative, Secure, and Rights-Respecting Digital Future on May 6, 2024.
The strategy focuses on building broad digital solidarity. Digital solidarity is a willingness to work together on shared goals, to stand together, to help partners build capacity, and to provide mutual support. Digital solidarity recognizes that all who use digital technologies in a rights-respecting manner are more secure, resilient, self-determining, and prosperous when we work together to shape the international environment and innovate at the technological edge. The concept of digital solidarity rests on efforts to build digital and cyber capacity so that partners are not only better able to build a defensible and resilient digital ecosystem over the long term but are also able to respond and recover quickly when incidents happen and to hold criminal and malign actors accountable.
To build broad digital solidarity, the strategy lays out:
Three guiding principles:
Four areas of action:
Working with other Federal Agencies, the Department of State developed this strategy to guide international engagement on technology diplomacy and advance the National Security Strategy and National Cybersecurity Strategy.
The strategy sets out a path for the United States to mobilize all resources at its disposal to implement an affirmative and proactive vision through which building digital solidarity connects people and information like never before, fostering a more inclusive, secure, prosperous, and equitable world.
Towards an Innovative, Secure, and Rights-Respecting Digital Future
For more News Briefs and Original Analysis about the efforts of the State Department and the Bureau of Cyberspace and Digital Policy, see OODA Loop | State Department
Corporate Board Accountability for Cyber Risks: With a combination of market forces, regulatory changes, and strategic shifts, corporate boards and their directors are now accountable for cyber risks in their firms. See: Corporate Directors and Risk
Geopolitical-Cyber Risk Nexus: The interconnectivity brought by the Internet has made regional issues affect global cyberspace. Now, every significant event has cyber implications, making it imperative for leaders to recognize and act upon the symbiosis between geopolitical and cyber risks. See The Cyber Threat
Ransomware’s Rapid Evolution: Ransomware technology and its associated criminal business models have seen significant advancements. This has culminated in a heightened threat level, resembling a pandemic in its reach and impact. Yet, there are strategies available for threat mitigation. See: Ransomware, and update.
Challenges in Cyber “Net Assessment”: While leaders have long tried to gauge both cyber risk and security, actionable metrics remain elusive. Current metrics mainly determine if a system can be compromised without guaranteeing its invulnerability. It’s imperative not just to develop action plans against risks but to contextualize the state of cybersecurity concerning cyber threats. Despite its importance, achieving a reliable net assessment is increasingly challenging due to the pervasive nature of modern technology. See: Cyber Threat
Decision Intelligence for Optimal Choices: Numerous disruptions complicate situational awareness and can inhibit effective decision-making. Every enterprise should evaluate its data collection methods, assessment, and decision-making processes for more insights: Decision Intelligence.
Proactive Mitigation of Cyber Threats: The relentless nature of cyber adversaries, whether they are criminals or nation-states, necessitates proactive measures. It’s crucial to remember that cybersecurity isn’t solely the IT department’s or the CISO’s responsibility – it’s a collective effort involving the entire leadership. Relying solely on governmental actions isn’t advised, given its inconsistent approach towards aiding industries in risk reduction. See: Cyber Defenses
The Necessity of Continuous Vigilance in Cybersecurity: The consistent warnings from the FBI and CISA concerning cybersecurity signal potential large-scale threats. Cybersecurity demands 24/7 attention, even on holidays. Ensuring team endurance and preventing burnout by allocating rest periods are imperative. See: Continuous Vigilance
Embracing Corporate Intelligence and Scenario Planning in an Uncertain Age: Apart from traditional competitive challenges, businesses also confront unpredictable external threats. This environment amplifies the significance of Scenario Planning. It enables leaders to envision varied futures, thereby identifying potential risks and opportunities. Regardless of their size, all organizations should allocate time to refine their understanding of the current risk landscape and adapt their strategies. See: Scenario Planning
Track Technology-Driven Disruption: Businesses should examine technological drivers and future customer demands. A multidisciplinary knowledge of tech domains is essential for effective foresight. See Disruptive and Exponential Technologies.