United States Cybersecurity Strategy, Policy, and Organization: Poorly Postured to Cope with a Post-9/11 Security Environment?

Is United States cybersecurity strategy, policy, and organization postured to cope with the post-911 security environment Following an exhaustive review of recurring and stand-alone strategic cybersecurity strategy and policy documents, and a detailed assessment of the U.S. cyber organization within the Department of Homeland Security, Department of Defense, and Department of Justice, the author concludes that the United States is vulnerable to a cyber attack. Despite recent publicity about cyber attacks against certain private and governmental organizations, the genesis of American awareness of cyber threats began during the Clinton Administration. Unfortunately, the quest for improved cybersecurity in response to those threats has progressed unevenly. Cybersecurity strategy, policy, and organization have undergone numerous changes, and each change has attempted to adapt to the dynamic nature of cyberspace. While progress has been made on many fronts, cybersecurity strategy, policy, and organization have not incorporated many of the lessons the Intelligence Community learned from 911. Because of this shortfall, the United States is potentially vulnerable to a devastating cyber attack.