The Cybersecurity Executive Order: What’s Coming and Where Are the Opportunities?
Summary
Private sector companies have a considerable amount of work to do to comply with the recent Presidential Executive Order on Improving the Nation’s Cybersecurity. Existing contracts must be scrutinized to reduce the trend of serious cyberattacks across government and industry alike. It reads, in part, “The private sector must adapt to the continuously changing threat environment, ensure its products are built and operate securely, and partner with the Federal Government to foster a more secure cyberspace.” The order further recommends standardizing common cybersecurity contractual requirements across agencies, to “streamline and improve compliance for vendors and the Federal Government.” Beyond the effect on contract implications, vendors can expect more attention from the government in several key technology areas, which will spark greater demand and more funding. CISA is required to report quarterly to OMB and the National Security Advisor on implementation of threat-hunting practices. By the end of the summer (within 90 days of the date of the order) the Secretary of Commerce will provide guidance on practices to enhance software supply chain security.