WASHINGTON, D.C. – U.S. Senator Angus King (I-Maine) and Representative Mike Gallagher (R-Wisc.), Co-Chairs of the Cyberspace Solarium Commission (CSC), today applauded the inclusion of several key cybersecurity provisions in the final version of the 2023 National Defense Authorization Act. The joint House and Senate version of the annual defense bill released this week includes legislation to establish a Bureau of International Cyberspace Policy to coordinate international cyber affairs at the U.S. Department of State – a top recommendation of the CSC.

The released text also requires U.S. Cyber Command (CYBERCOM) to research its methods for responding and deterring cyberattacks and recommends that the Navy create a cyber officer position. As Co-Chairs of the commission, King and Gallagher pushed for these provisions to be included in the final version of the bill.

“As threats from Russia, China, and other adversaries grow, the United States must continue to invest in strong cyberdefenses. That’s why the 2023 National Defense Authorization Act includes critical, timely provisions to improve the Pentagon’s cyber coordination and ensure that CYBERCOM has the tools it needs to successfully deter any foe,” said Senator King. “The bill’s creation of a Bureau of International Cyberspace Policy is another important step towards the Cyberspace Solarium Commission’s goal of giving cyber a voice at the table both in our government and on the world stage. When the Solarium released our list of recommendations, we made it clear this was an action document, not a report designed to collect dust. I’m proud of the significant progress we’ve made over the last few years and look forward to getting this bill across the finish line.”

“This NDAA takes another important step towards better securing our country in cyberspace,” said Rep. Gallagher. “From the inclusion of the Cyber Diplomacy Act, which ensures the State Department is structured to promote our values in cyberspace, to continued guidance on CYBERCOM on force generation, readiness, and acquisition, the Cyber Solarium Commission continues to enact critical legislation to defend our country.”

Significant cybersecurity provisions in the 2023 National Defense Authorization Act include:

• New guidance for U.S. Cyber Command to improve force readiness, force structure and acquisition efforts, along with clarification on the authority to conduct offensive operations in response to foreign power cyber campaigns against U.S. critical infrastructure.

• The Cyber Diplomacy Act establishing a Bureau of International Cyberspace Policy at the U.S. Department of State, a major CSC recommendation.

• An increase of $44.1 million to support CYBERCOM’s Hunt Forward Operations.

• A strategy for converged cyber and electronic warfare conducted by and through deployed military and intelligence assets operating in the radio frequency domain to provide strategic, operational, and tactical effects in support of combatant commanders.

• A biennial, unclassified report through the 2032 election cycle on CYBERCOM efforts to ensure election security and counter election threats

• A study on the military services' responsibilities for organizing, training, and presenting forces to CYBERCOM and recommendations on a future force generation model for cyberspace operations forces

• Recommendations to the Navy on establishing a Cyber Operations officer career designation, similar to all the other branches of the Armed Forces.

• The creation of an Assistant Secretary of Defense for Cyber at the Department of Defense. The new Senate-confirmed individual will be responsible for ensuring America’s cyber forces are effectively trained, maintained and equipped across all services.

• An assessment of the DOD's new competitive cyber hiring policy to determine if it would be effective and feasible for other federal agencies. The “cyber exception” policy allowed DOD to hire cyber experts at competitive, market-rate salaries and with less unnecessary red tape than the typical federal hiring guidelines.

As Co-Chairs of the Cyberspace Solarium Commission (CSC), Senator King and Representative Gallagher are recognized as two of Congress’ leading experts on cyberdefense and are strong advocates for a forward-thinking cyberstrategy that emphasizes layered cyberdeterrence. Since it officially launched in April 2019, dozens of CSC recommendations have been enacted into law, including the creation of a National Cyber Director.