President Biden has signed an executive order aimed at improving US cybersecurity in the wake of major attacks.

The last few months have seen multiple high-profile, crippling cybersecurity attacks on US agencies and businesses. SolarWindsimpacted private and public organizations alike, with the full extentstill under investigation. Most recently, Colonial Pipeline was hit with a crippling ransomware attack, severely impacting fuel prices all along the East Coast.

The threat is exacerbated by hacker groups that are state-sponsored, giving them access to the funds and technology needed to wreak havoc.

In response, President Biden has issued an executive order aimed at “Improving the Nation’s Cybersecurity.” The order focuses on major changes, rather than incremental improvements, in an effort to keep pace with rapidly-evolving threats.

Incremental improvements will not give us the security we need; instead, the Federal Government needs to make bold changes and significant investments in order to defend the vital institutions that underpin the American way of life. The Federal Government must bring to bear the full scope of its authorities and resources to protect and secure its computer systems, whether they are cloud-based, on-premises, or hybrid. The scope of protection and security must include systems that process data (information technology (IT)) and those that run the vital machinery that ensures our safety (operational technology (OT)).