On March 11, 2020, the Cyberspace Solarium Commission (CSC or Commission) released its highly anticipated report (Report), containing a host of legal and policy recommendations and signaling a fundamental shift—and “strategic adjustment”—to address cybersecurity risks facing the United States. The Report, which is based upon the strategic principle of “layered cyber deterrence” and proposes a “Whole-of-Nation” approach to addressing evolving and consequential cyber threats, contains dozens of key recommendations spread across six core pillars. If adopted, these recommendations would result in substantial changes for the federal government, as well as significant changes in expectations and obligations for the private sector. To implement some of these recommendations, the report includes legislative language that could be adopted by Congress, in the next National Defense Authorization Act (NDAA), as a vehicle for enactment.
