ABSTRACT

The United States cybersecurity policy has changed significantly under the Trump administration. The emphasis on persistent engagement and collective deterrence and the likely hindrances to a negotiated agreement to end or reduce cyber-attack means that the United States is entering a new era of international cybersecurity policy, one that is more conflictive and that comes with greater risk of warfare. One result of the realization that no network can be guaranteed to resist persistent efforts by an advanced attacker is an increased emphasis on risk-management and on resilience in cybersecurity planning. The emphasis on risk management and resilience assumes that opponents will be able to gain access to networks and the goal should be to ensure continued provision of critical services in a degraded network environment. The Green Book was deemed adequate, but many states reject millennial governance and are asserting sovereign control over national networks to provide for public safety and advance their national interests.