In recent developments, the White House has released a new cybersecurity strategy that, among other things, addresses the role of big tech companies in preventing cyberattacks. The strategy document calls for “rebalancing the responsibility to protect cyber” to shift responsibility for attacks such as ransomware on individuals, small businesses and local governments. It also described China as “the most extensive, most active and persistent threat to both public and private sector networks.”
President Joe Biden’s plan emphasizes goals and not just immediately implemented laws. But the White House appears to be critical of rules and regulations that would expand cybersecurity requirements for companies that operate digital infrastructure. That could include cloud computing services that power a lot of web infrastructure — and meet minimum security standards or face legal liability. The strategy calls for government agencies to encourage compliance with tax breaks or other incentives.
In addition, the administration said it will work with Congress to prevent software companies from being held liable for shipping products without taking reasonable security precautions. “Software companies should have the freedom to innovate but be held accountable when they fail to meet their duty of care to consumers, businesses or critical infrastructure providers,” the strategy document says.
According to the Biden administration, the goal is to foster a digital ecosystem that allows more people to own their own (often insecure) devices. “A person’s lack of judgment, use of expired passwords, or clicking on suspicious links should not compromise national security,” the document said. “Protecting data and ensuring the reliability of critical systems must be the responsibility of the owners and operators of the systems that hold our data and make our society work, as well as the technology providers who build and service these systems.”
“The document cites the growing threat of ransomware schemes as a particular area of focus. Alongside the campaign to shut down actors operating ransomware, agencies will also follow a proposed 2022 order to regulate digital assets that will require them to go after illegal cryptocurrency exchanges that help make ransomware profitable.”
Biden’s strategy replaces a 2018 document created by former President Donald Trump.
