Cybersecurity: New Cyber Strategy; Cybercrime Executive Order
Long-term policies and near-term priorities
Download the Regulatory Alert
Download PDFKPMG Regulatory Insights
- Cyber Strategy: Policies and priorities intended to support American leadership in the digital world in areas such as “finance, innovation and emerging technology, military power, and manufacturing.”
- Combating Cybercrime: Directive to harden financial and digital systems against cyber threats, support victims, and counter attacks through “law enforcement, diplomacy, and potential offensive actions.”
- Aligning Goals: Key features include government coordination (across federal agencies and between federal and state/local authorities), public-private collaboration (to expand innovation and scale), and engagement with foreign governments (including a focus on enforcement actions and potential for other consequences, where appropriate.)
- Looking Ahead: Organizations will need strong cybersecurity programs consistent with existing frameworks (e.g., NIST CSF, ISO 27001) to respond to evolving cybercrime risk, including impacts to critical infrastructure, and given the expectation of an increase in public-private collaboration.
The Administration has released its "Cyber Strategy for America" (Cyber Strategy) and issued an Executive Order, entitled “Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens”. Together, these actions outline the Administration’s intended approach to cybersecurity, aligning high‑level strategic policies and priorities with near‑term operational directives.
The Cyber Strategy provides overarching policy architecture, while the Executive Order establishes immediate priorities for interagency coordination, enforcement, and international cooperation.
Cyber Strategy
The Cyber Strategy articulates the Administration’s long‑term direction for federal cybersecurity policy. It frames cybersecurity as integral to national security and economic competitiveness and emphasizes coordinated action across federal agencies and the private sector. The strategy is organized around six policy pillars that collectively address deterrence, regulatory approach, network security, infrastructure resilience, technological leadership, and workforce development.
Strategy Policy Pillar | Details |
|---|---|
Shape Adversary Behavior |
|
Promote “Common Sense” Regulation |
|
Modernize and Secure Federal Government Networks |
|
Secure Critical Infrastructure |
|
Sustain Superiority in Critical and Emerging Technologies |
|
Build Talent and Capacity |
|
Executive Order on Combating Cybercrime
The Executive Order focuses on near‑term operational measures to counter cyber‑enabled fraud, ransomware, extortion, and related predatory schemes, particularly those conducted by transnational criminal organizations (TCOs). It emphasizes coordination across federal agencies, engagement with the private sector, and use of diplomatic and enforcement tools.
Executive Order Key Areas | Details |
|---|---|
Interagency coordination | Directs:
|
Strategic review and action planning | Initial efforts include:
|
Public-private collaboration | Encourages:
|
Enforcement and restitution | Demands:
|
Agency responsibilities to implement the Executive Order are assigned as follows:
Agency/Official | Responsibility | Deadline |
|---|---|---|
Interagency:
In consultation with the Office of the National Cyber Director and the Assistant to the President and Homeland Security Adviser (APHSA): | Combat TCOs through review of, and identification of improvements to, existing operational, technical, diplomatic, and regulatory frameworks | 60 days |
Submit an action plan:
| 120 days | |
Attorney General | Prioritize prosecutions of cyber-enabled fraud | Ongoing |
Recommend through APHSA a Victim Restoration Program for cybercrime, fraud, and predatory schemes | 90 days | |
Secretary of Homeland Security | Acting through CISA in partnership with NCC, support SLTT (state, local, Tribal and territorial government) partners with training, technical assistance, and resilience building | Ongoing |
Secretary of State | Engage foreign governments | Ongoing |
Apply consequences for non-cooperation, including:
| Ongoing |
Dive into our thinking:
Cybersecurity: New Cyber Strategy; Cybercrime Executive Order
Long-term policies and near-term priorities
Download PDFExplore more
Subscribe to receive regulatory and compliance transformation insights
By registering you will periodically receive additional compliance-related communications from KPMG.
Meet our team
