Cyberspace Solarium Commission

{{Use mdy dates|date=July 2022}}

{{Short description|United States bipartisan government body}}{{Infobox government agency

| name = Cyberspace Solarium Commission (CSC)

| type = Commission

| seal_size =

| formed = August 13, 2018

| dissolved = December 21, 2021

| chief1_name = Angus King

| chief1_position = Co-chair

| chief2_name = Mike Gallagher

| chief2_position = Co-chair

| keydocument1 = John S. McCain National Defense Authorization Act for Fiscal Year 2019

| website = {{URL|https://www.solarium.gov/home|Official website}}

}}

The Cyberspace Solarium Commission (CSC) was a United States bipartisan, congressionally mandated intergovernmental body created by the John S. McCain National Defense Authorization Act for Fiscal Year 2019. Its purpose was "to develop a strategic approach to defense against cyber attacks of significant consequences" to the United States.{{Cite web |title=Inside the Cyberspace Solarium Commission |url=https://nationalsecurity.gmu.edu/events/inside-the-solarium/ |access-date=April 28, 2022 |website=National Security Institute}} The commission was sunsetted on December 21, 2021, but is continuing its work as a non-profit in 2022, led by Mark Montgomery, the commission's former executive director at the non-profit organization Foundation for the Defense of Democracies (FDD) with a limited staff and the support of a small number of senior advisors.{{Cite web |title=The legacy of the Cyberspace Solarium Commission |url=https://fcw.com/security/2021/12/legacy-cyberspace-solarium-commission/360244/ |access-date=April 28, 2022 |website=FCW}}{{Cite web |date=January 4, 2022 |title=Cyberspace Solarium Disbands, to Reform as Nonprofit |url=https://www.govtech.com/security/cyberspace-solarium-disbands-to-reform-as-nonprofit |access-date=April 28, 2022 |website=GovTech}} Known as CSC 2.0, this project preserves the legacy and continues the work of the CSC.{{Cite web |title=Homepage |url=https://cybersolarium.org/ |access-date=June 2, 2022 |website=CSC 2.0}}

Mandate and work

The CSC was created in 2019 with the objective to establish policy solutions required to prevent and prepare the United States against cyber attacks. The commission is considered to have had a major impact on cybersecurity policies by providing blueprints for further transformative processes on the future. In 2019, a small group of members from the DoD and DHS, including Mark Montgomery, future executive director, later joined by the future chief of staff to the commission worked to create the building blocks of the commission, working to establish strategy, office, functions, and hiring. The commission hired multiple directors and senior directors and was augmented by multiple detailees from federal agencies to create three task forces and a forth directorate to cover the whole of cyberspace strategy for the United States. During the course of the commission, the staff engaged with over 400 agencies, public sector representatives, and cyber experts.{{Cite web |title=Interim Report November 2019 |url=https://epic.org/wp-content/uploads/foia/epic-v-ai-commission/AI-Commission-Interim-Report-Nov-2019.pdf |access-date=2025-01-03 |website=National Security Commission on Artificial Intelligence}}{{Cite web |title=U.S. CYBERSECURITY AND DATA PRIVACY OUTLOOK AND REVIEW – 2019 |url=https://www.gibsondunn.com/wp-content/uploads/2019/01/us-cybersecurity-and-data-privacy-outlook-and-review-2019.pdf |access-date=2025-01-03 |website=Gibson Dunn}}

= Reports =

The Cyberspace Solarium Commission issued a report in March 2020, listing 83 recommendations, for Congressional and Executive action.{{Cite web|last=|first=|date=|title=CSC Final Report|url=https://5kb.d9b.myftpupload.com/wp-content/uploads/2020/03/CSC-Final-Report.pdf|archive-url=|archive-date=|access-date=|website=}} Over the course of two years, the commission's work led Congress to legislate, appoint, and confirm the National Cyber Director, pushed the release of cybersecurity-focused executive orders, and broadened the authorities and expanded the budget of the Cybersecurity and Infrastructure Security Agency.{{Cite web |last=Geller |first=Eric |title=Politico Pro Q&A: Cyberspace Solarium Commission co-chairs Sen. Angus King and Rep. Mike Gallagher on the group's legacy |url=https://www.politico.com/news/2022/01/06/angus-king-mike-gallagher-cyberspace-526683 |access-date=April 28, 2022 |website=Politico}} By August 2021, the CSC reported that 75% of the initial suggestions had been implemented, but major ones had been ignored to date, such as the creation of a congressional cyber committee.{{Cite web |title=Cyberspace Solarium update finds much work to be done |url=https://therecord.media/cyberspace-solarium-update-finds-much-work-to-be-done |access-date=2025-01-03 |website=therecord.media |language=en}} In September 2022, it reported that there was still no signs of a congressional cyber committee being implemented.{{Cite web |title=Cyberspace Solarium Commission calls for sustained investment in defense |url=https://therecord.media/cyberspace-solarium-commission-calls-for-sustained-investment-in-defense |access-date=2025-01-03 |website=therecord.media |language=en}}{{Cite web |last=Murphy |first=Greg |title=Council Post: Revisiting The U.S. Cyberspace Solarium Commission Report |url=https://www.forbes.com/councils/forbestechcouncil/2022/11/22/revisiting-the-us-cyberspace-solarium-commission-report/ |access-date=2025-01-03 |website=Forbes |language=en}}

The commission made recommendations organized into the categories below.{{Cite web |title=Cyberspace Solarium Commission |url=https://www.solarium.gov/home |access-date=July 1, 2022 |website=Cyberspace Solarium Commission}}

{{blockquote|

  1. Reform the U.S. Government's Structure and Organization for Cyberspace.
  2. Strengthen Norms and Non-Military Tools.
  3. Promote National Resilience.
  4. Reshape the Cyber Ecosystem.
  5. Operationalize Cybersecurity Collaboration with the Private Sector.
  6. Preserve and Employ the Military Instrument of National Power.}}

Commission members

During its tenure, the commission included the following members:{{Cite web |title=Commissioners |url=https://www.solarium.gov/commissioners |access-date=June 21, 2022 |website=Cyberspace Solarium Commission}}

The four federal agency representatives rotated based on agency availability, but were most often attended by the highest policy senior executives in their particular agency.

CSC 2.0

{{Infobox organization

| name = Cyberspace Solarium Commission 2.0

| formation = {{start year and age|2022}}

| abbreviation = CSC 2.0

| type = 501(c)(3) organization{{URL|https://eng.auburn.edu/mccrary/focus-on-research}}

| purpose = Cybersecurity

| leader_title =

| leader_name = Mark Montgomery

| leader_title2 = Co-chair

| leader_name2 = Angus King

| leader_title3 = Co-chair

| leader_name3 = Mike Gallagher

| website = {{URL|cybersolarium.org|Official website}}

}}

The CSC 2.0 project is led by the original CSC commissioners. It is housed in the Center on Cyber and Technology Innovations (CCTI) at the Foundation for the Defense of Democracies (FDD).{{Cite web |title=Mission and History |url=https://cybersolarium.org/mission-and-history/ |access-date=2025-01-05 |website=CSC 2.0 |language=en}}{{Cite web |title=White House critical infrastructure protection order is ‘outdated’ and needs rethinking, Cyberspace Solarium Commission says |url=https://therecord.media/critical-infrastructure-ppd21-white-house-outdated-cyberspace-solarium-commission |access-date=2025-01-05 |website=therecord.media |language=en}} CSC 2.0, established in 2022, tracks federal agencies' efforts to carry out the recommendations from the Cyberspace Solarium Commission's 2020 report.{{Cite web |date=2024-09-26 |title=Cyberspace Solarium Commission 2.0 Brings Much to Think About for the Next Presidential Administration |url=https://oodaloop.com/analysis/ooda-original/cyberspace-solarium-commission-2-0-brings-much-to-think-about-for-the-next-presidential-administration/ |access-date=2025-01-13 |website=OODAloop |language=en-US}}{{Cite web |last= |first= |date=2022-07-29 |title=What is the Cyberspace Solarium Commission 2.0 Project and Why Should I (as a US Citizen) Care? |url=https://www.pivotpointsecurity.com/what-is-the-cyberspace-solarium-commission-2-0-project-and-why-should-i-as-a-us-citizen-care/ |access-date=2025-01-13 |website=Pivot Point Security |language=en-US}} It publishes progress reports monitoring the status and implementation of the commission's recommendations, highlighting any remaining gaps and proposing further actions.{{Cite web |last=Poireault |first=Kevin |date=2024-09-20 |title=US Cyberspace Solarium Commission Outlines Ten Cyber Policy Priorities |url=https://www.infosecurity-magazine.com/news/us-cyberspace-solarium-cyber/ |access-date=2025-01-13 |website=Infosecurity Magazine |language=en-gb}} CSC 2.0 focuses on closing the remaining gaps by reviewing legislation, overseeing agency funding, and highlighting weaknesses in critical infrastructure.{{Cite web |title=White House critical infrastructure protection order is ‘outdated’ and needs rethinking, Cyberspace Solarium Commission says |url=https://therecord.media/critical-infrastructure-ppd21-white-house-outdated-cyberspace-solarium-commission |access-date=2025-01-13 |website=therecord.media |language=en}} It also calls for cooperation between the public and private sectors to develop effective ways to defend against cyber threats.{{Cite web |last=Miller |first=Maggie |date=2024-10-22 |title=Dozens of former officials chart course for next administration’s cyber policies |url=https://www.politico.com/news/2024/10/22/former-officials-next-administration-cyber-policies-00184854 |access-date=2025-01-13 |website=POLITICO |language=en}}

= Reports =

  • 2024 Annual Report on Implementation, 19 September 2024{{Cite web |last=Ma |first=Jiwon |date=2024-09-19 |title=2024 Annual Report on Implementation |url=https://cybersolarium.org/annual-assessment/2024-annual-report-on-implementation/ |access-date=2025-01-19 |website=CSC 2.0 |language=en}}
  • Healthcare Cybersecurity Needs a Check Up, 4 June 2024{{Cite web |last=Ma |first=Jiwon |date=2024-06-04 |title=Healthcare Cybersecurity Needs a Check Up |url=https://cybersolarium.org/csc-2-0-reports/healthcare-cybersecurity-needs-a-check-up/ |access-date=2025-01-19 |website=CSC 2.0 |language=en}}
  • After Action Report: Multistakeholder Insights to Advance Water and Wastewater Infrastructure Cybersecurity, 13 December 2023{{Cite web |last=Ma |first=Jiwon |date=2023-12-13 |title=After Action Report: Multistakeholder Insights to Advance Water and Wastewater Infrastructure Cybersecurity |url=https://cybersolarium.org/csc-2-0-reports/after-action-report-multistakeholder-insights-to-advance-water-and-wastewater-infrastructure-cybersecurity/ |access-date=2025-01-19 |website=CSC 2.0 |language=en}}
  • 2023 Annual Report on Implementation, 19 September 2023{{Cite web |last=Ma |first=Jiwon |date=2023-09-19 |title=2023 Annual Report on Implementation |url=https://cybersolarium.org/annual-assessment/2023-annual-report-on-implementation/ |access-date=2025-01-19 |website=CSC 2.0 |language=en}}
  • Revising Public-Private Collaboration to Protect US Critical Infrastructure, 7 June 2023{{Cite web |last=Ma |first=Jiwon |date=2023-06-07 |title=Revising Public-Private Collaboration to Protect U.S. Critical Infrastructure |url=https://cybersolarium.org/csc-2-0-reports/revising-public-private-collaboration-to-protect-u-s-critical-infrastructure/ |access-date=2025-01-19 |website=CSC 2.0 |language=en}}
  • Time to Designate Space Systems as Critical Infrastructure, 14 April 2023
  • Full Steam Ahead: Enhancing Maritime Cybersecurity, 28 March 2023{{Cite web |last=Fixler |first=Annie |date=2023-03-28 |title=Full Steam Ahead: Enhancing Maritime Cybersecurity |url=https://cybersolarium.org/csc-2-0-reports/full-steam-ahead-enhancing-maritime-cybersecurity/ |access-date=2025-01-14 |website=CSC 2.0 |language=en}}
  • Request for the Information on Cyber Workforce Development Submitted to the Office of National Cyber Director, 3 November 2022{{Cite web |last=Ma |first=Jiwon |date=2022-11-03 |title=Request For Information on Cyber Workforce Development Submitted to the Office of National Cyber Director |url=https://cybersolarium.org/csc-2-0-reports/request-for-information-submitted-to-the-office-of-national-cyber-director/ |access-date=2025-01-14 |website=CSC 2.0 |language=en}}
  • The Need for Cybersecurity Data and Metrics: Empirically Assessing Cyberthreat, 10 October 2022{{Cite web |last=Fixler |first=Annie |date=2022-10-10 |title=The Need for Cybersecurity Data and Metrics: Empirically Assessing Cyberthreat |url=https://cybersolarium.org/csc-2-0-reports/the-need-for-cybersecurity-data-and-metrics-empirically-assessing-cyberthreat/ |access-date=2025-01-14 |website=CSC 2.0 |language=en}}
  • 2022 Annual Report on Implementation, 21 September 2022{{Cite web |last=Ma |first=Jiwon |date=2022-09-21 |title=2022 Annual Report on Implementation |url=https://cybersolarium.org/annual-assessment/2022-annual-report-on-implementation/ |access-date=2025-01-11 |website=CSC 2.0 |language=en}}
  • Workforce Development Agenda for the National Cyber Director, 2 June 2022{{Cite web |last=Fixler |first=Annie |date=2022-06-02 |title=Workforce Development Agenda for the National Cyber Director |url=https://cybersolarium.org/csc-2-0-reports/workforce-development-agenda-for-the-national-cyber-director/ |access-date=2025-01-11 |website=CSC 2.0 |language=en}}

References