The saga of the cyber security executive order continues; a new
draft
surfaced just last week.
The first draft leaked in January, shortly before the President
was expected to sign a cyber-security order. He abruptly postponed.
Another draft leaked in February, but the President didn't
sign that one either. Perhaps this latest draft is the final one.
"Rumors had it,"
Paul Rosenzweig writes, "that the Cybersecurity EO was
contingent on resolving how to deal with IT technology development
and innovation."
This latest draft EO addresses three cyber security topics:
federal networks, critical infrastructure, and national
cybersecurity.
For federal networks, the order's
themes are improvement and integration. "[F]or too long,"
the order laments, "[t]he executive branch has . . . accepted
antiquated and difficult-to-defend IT." Thus, the order
requests "risk management reports" from federal agencies
that show the thinking behind their "mitigation and
