§10302 International Cyberspace and Digital Policy Strategy

Summary

The President must, through the Secretary and working with other federal agencies, create an international cyberspace and digital policy strategy by December 23, 2023. The plan must review past U.S. actions to support the cyber policy in section 10301(a) and lay out a diplomacy plan. That plan should cover steps to build and push for rules of responsible behavior in cyberspace, lower the number and harm of cyberattacks on U.S. people, businesses, and agencies, protect U.S. and allied critical infrastructure, improve how allies share information and work together on regulation and cybercrime investigations, and share best practices to make civilians and private companies more resilient. It must also review multilateral efforts, other countries’ alternative ideas about cyber norms, and describe new and growing cyber threats from foreign adversaries, state-sponsored actors, and non-state actors to national security, U.S. government and private cyber systems, intellectual property, and citizens’ privacy and safety. The strategy must review tools the President can use to deter or calm cyber tensions, whether those tools have been used, and if they worked. It must assess resources needed to build international cyber norms and whether the Department has enough budget, expertise, legal authority, and staff, working with the Office of the National Cyber Director and the Office of Management and Budget. It must check how well the Department is organized with other agencies and include a plan, with the Department of Defense, for putting cyber issues into mutual defense agreements. The public version must be unclassified and published (for example, in the Federal Register), and it may have a classified annex. Within 30 days after finishing the strategy, the Secretary must brief the main Senate and House committees on foreign affairs, intelligence, and armed services. The strategy must be updated within 90 days after any major U.S. policy change and within 1 year after each new President’s inauguration.