Government Watchdog Sounds Alarm on Biden Admin’s Cyber Strategy: ‘Lacks Milestones, Performance Measures, Resources’

The Government Accountability Office (GAO) has criticized the cyber strategy of the Biden administration, stating that it lacks milestones, performance measures, resources, and fully defined roles and responsibilities. The GAO released a report ahead of a hearing with Comptroller General Gene Dodaro, highlighting flaws in the White House’s National Cybersecurity Strategy, which was released on March 2. While the GAO acknowledged that the strategy provides a good foundation for addressing the nation’s cyber risks and challenges, it does not address all desirable characteristics of national strategies.

Cooperation Needed

The GAO also noted that the cybersecurity strategy states there would be cooperation between the Office of the National Cyber Director and federal agencies to develop an implementation plan to execute the strategy. However, the GAO believes that overall progress in strengthening cybersecurity will remain limited without sufficient resources and interagency coordination.

Recommendations for CISA

The GAO made recommendations for the Cybersecurity and Infrastructure Security Agency (CISA) to carry out its mission. CISA needs to complete its organizational transformation to ensure that sufficient resources are allocated to the agency’s cybersecurity services. It also needs to improve interagency coordination to better assist tribal, state, local, and territorial government organizations in preventing and responding to ransomware attacks. Additionally, CISA needs to establish timelines for its efforts to provide guidance that would help agencies tasked with protecting critical infrastructure implement their statutory responsibilities.

More actions are required to strengthen the nation’s cybersecurity, and the GAO’s report highlights the need for a more comprehensive and effective strategy.