The following statement can be attributed to Chris Mohr, President for the Software & Information Industry Association.
We are encouraged by the Biden Administration’s focus on strengthening the nation’s cybersecurity in the wake of a series of devastating cyber breaches involving critical infrastructure systems. Although there are portions of the new Executive Order that require closer attention and others that may prove challenging in implementation and should be revisited by the incoming Trump Administration, SIIA finds much to commend in the EO’s approach, which builds on the foundation set in the first Trump administration. Indeed, many of the concepts in the new EO are designed to modernize core principles set out in President Trump’s EO on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure to address evolution in the cybersecurity space.
In particular, we commend the following:
First, the EO reflects a forward-looking approach to adopting next generation solutions to cybersecurity challenges, including artificial intelligence (AI), post-quantum cryptography, and digital identity.
Second, we are encouraged by the EO’s reform of cybersecurity procurement to improve the ability to adopt a multi-vendor environment and limit risks from the overreliance on insecure vendors. Relatedly, we appreciate provisions designed to formalize cybersecurity requirements for federal technology acquisitions, including updated software security standards and enhanced cloud security measures under FedRAMP.
Third, the emphasis on public-private collaboration remains essential to advancing cybersecurity. We support the establishment of a consortium with industry at the National Cybersecurity Excellence Center to develop guidance on the implementation of secure software development, security, and operations practices.
As the global threat landscape evolves, leadership and investment in cutting-edge solutions and engagement with industry stakeholders will be critical to staying ahead of adversaries that pose threats to U.S. national security. We look forward to working with the Trump Administration to strengthen cybersecurity and resiliency.