In January 2008, the Bush Administration issued the Top Secret National Security Presidential Directive 54 on Cybersecurity Policy which “establishes United States policy, strategy, guidelines, and implementation actions to secure cyberspace.”
Despite its relevance to a central public policy issue, both the Bush and Obama Administrations had refused to release the Directive.
But last week, in response to a five-year Freedom of Information Act effort by the Electronic Privacy Information Center, the National Security Agency released a lightly redacted version of the document, most of which had been unclassified all along.
“This Directive, which is the foundational legal document for all cybersecurity policies in the United States, evidences government efforts to enlist private sector companies, more broadly monitor Internet activity, and develop offensive cybersecurity capability,” said EPIC in its release of the document.
Even the best-designed policy rests on assumptions about who will staff it, how it will be funded, whether the responsible institutions have ever coordinated, and if the goals are achievable. Those assumptions usually go unchecked until a program is already struggling, stalled by capacity bottlenecks, overlapping authorities, and other predictable implementation problems. To dig into […]
These fellows will be working to turn ambitious ideas into actionable policy – from improving how frontier AI models are evaluated for government use to strengthening biosecurity protections and building the workforce needed to keep AI systems safe.
The goal: help communities approach data center development with stronger negotiating tools and a clearer understanding of what’s possible.
Just as sports fanatics had plenty to celebrate this year, so does the heat policy team at FAS. In response to recent heat events, leaders across the country have taken steps to build heat resilience.