The report’s push to use “all elements of national power — diplomatic, economic, and when necessary, military” is a signal that the current state of cybersecurity demands broader and more vigorous efforts, experts told Cybersecurity Dive.

“A lot of these issues, unfortunately, have been long-standing issues, and there’s been incremental improvements, but perhaps not as quickly as some would like,” said Brandon Pugh, director and resident senior fellow of cybersecurity and emerging threats at R Street Institute.

Chance to reassess, adjust priorities

The change in leadership presents an opportunity for the next president and lawmakers to assess what the outgoing administration accomplished, where adjustments could be made and areas that are in most need of prioritization.

“I don’t think we should see that as cynical or critical of the past. It just perhaps is a different belief in how we get to the same outcome,” Pugh said…

The recommendations, which largely repeat altered versions of efforts already underway, are a tacit acknowledgment that the work of cybersecurity is never done.

“From a security standpoint, that’s actually a good thing to see. The job is never done, because we will never have 100% security,” Pugh said. “This should be an iterative process and ongoing.”

Keep up to date on our cybersecurity and emerging threats work, including our Cyber 3 in 30 newsletter.