Key Points

1. 1) There is currently no quantitative standard to measure the country’s evolving cybersecurity posture.
2. 2) The creation of a Bureau of Cyber Statistics would standardize metrics and provide contextualized statistics to policymakers.
3. 3) While not all details on the bureau’s structure are finalized, Congress should set the bureau in motion by mandating its inception through legislation.