--- title: "The Cybersecurity Executive Order: How Does It Affect Us?" description: The Cybersecurity Executive Order makes protecting federal networks, updating systems, and directing agencies to work together a priority. image: https://blog.augustschell.com/hubfs/cybersecurity-executive-order.jpg --- [Skip to content](https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us#main-content) [![August Schell Logo](https://blog.augustschell.com/hubfs/ase-logo-2022-color-notag.svg "August Schell Logo")](http://augustschell.com) - [Services](https://augustschell.com/services/) Show submenu for Services - [Professional Services Offerings](https://augustschell.com/services-offering/) - Solutions Show submenu for Solutions - [Security](https://augustschell.com/home-security-solutions/) - [Big Data](https://augustschell.com/home-solutions-data/) - [Resources](https://augustschell.com/resources/) - [Company](https://augustschell.com/about-us/) Show submenu for Company - [Customers](https://augustschell.com/customers/) - [Partners](https://augustschell.com/partners/) - [Joint Ventures](https://augustschell.com/home-company-joint-ventures/) - [Contracts](https://augustschell.com/contracts-2/) - [Where to Find Us](https://augustschell.com/home-company-news/) - [About Us](https://augustschell.com/about/) - [Contact](https://augustschell.com/contact/) - [Quotes](https://augustschell.com/quotes/) Open main navigation Close main navigation - [Services](https://augustschell.com/services/) Show submenu for Services - [Professional Services Offerings](https://augustschell.com/services-offering/) - Solutions Show submenu for Solutions - [Security](https://augustschell.com/home-security-solutions/) - [Big Data](https://augustschell.com/home-solutions-data/) - [Resources](https://augustschell.com/resources/) - [Company](https://augustschell.com/about-us/) Show submenu for Company - [Customers](https://augustschell.com/customers/) - [Partners](https://augustschell.com/partners/) - [Joint Ventures](https://augustschell.com/home-company-joint-ventures/) - [Contracts](https://augustschell.com/contracts-2/) - [Where to Find Us](https://augustschell.com/home-company-news/) - [About Us](https://augustschell.com/about/) - [Contact](https://augustschell.com/contact/) - [Quotes](https://augustschell.com/quotes/) - [Careers](https://augustschell.com/careers/) [Careers](https://augustschell.com/careers/) Sep 14, 2017 5:03:59 AM # The Cybersecurity Executive Order: How Does It Affect Us? [Ron Flax](https://blog.augustschell.com/author/ron-flax) Share: [facebook-f icon](http://www.facebook.com/share.php?u=https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us) [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us) [Twitter icon](https://twitter.com/intent/tweet?url=https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us) [pinterest-p icon](http://pinterest.com/pin/create/link/?url=https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us) [envelope icon](mailto:?body=https://blog.augustschell.com/the-cybersecurity-executive-order-how-does-it-affect-us) ## Calling Government Agencies to Action on Strengthening Cybersecurity and Preventing Breaches **The Need for a Better Way: Protecting the U.S. Government from Vulnerabilities with a New Cybersecurity Executive Order** It’s well known that the federal government possesses highly sensitive data and limited resources to protect it. It seems like there’s a new major breach practically every week, whether it’s a corporation, government agency, etc. Things took a turn for the worst after the infamous hack on the Office of Personnel Management in 2014, [reported by USA Today](https://www.usatoday.com/story/news/politics/2017/05/11/president-trump-signs-cybersecurity-executive-order/101556518/). Suspected to be executed by China, the hack exposed personal records of millions of former and current government workers, most of which hold security clearances and was one of the most substantial cyberattacks in U.S. history. *“You can’t pick up a newspaper without reading about a breach, or some sort of threat or vulnerability. It’s a chronic problem, and after what happened at OPM, the general consensus seems to be that cyber threats targeting the U.S. government are now out of control.”* *-Ron Flax, CTO at August Schell* Post-OPM, the U.S. government has made cybersecurity an even greater priority, but despite heightened efforts, the threat landscape is still risky and virulent. According to [the 2017 Thales Data Threat Report, Federal Government Edition](https://dtr-gov.thalesesecurity.com/): - 34% of federal agencies experienced a data breach in the last year. - 65% experienced a data breach at some point in the past. - 96% of agencies reported that they considered themselves “vulnerable” to cyberattacks. 48% said they were “very” or “extremely” vulnerable. Given the clear and present need to raise protections of the U.S. in cyberspace, the Trump administration has issued an Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure, which states what the White House believes policies should be, and who should be in charge. “Essentially, it’s about calling out responsible parties for the bulk of the government, which is primarily Homeland Security and their agencies—they report to the Directors of OMB and GSA. For national security, the responsible party is the Secretary of Defense and the Director of National Intelligence,” Ron Flax, CTO at August Schell explained. “It’s split between those two parties, so for anything that’s national security-related, leadership is with the Secretary of Defense and National Intelligence. For everyone else, leadership is with Homeland Security, OMB, and GSA. Then there’s the department heads, and the agency department heads are ultimately responsible for the cybersecurity posture of their respective agency or organization. The EO doesn’t call out specific products or technologies, but they do say that technology plays a big part, that many of our systems are out of date, inadequate, unpatched, and the like, so they’re calling upon agency heads and essentially saying, ‘get your act together’.” A quick summary of the EO, [reported by Lawfare](https://www.lawfareblog.com/summary-cybersecurity-executive-order): 1. Section 1: Cybersecurity of Federal Networks - Requires agency heads to be guided by the [National Institute of Standards and Technology’s (NIST) Framework](https://www.nist.gov/cyberframework) for Improving Critical Infrastructure Cybersecurity. - Directs agency heads to produce a report within 90 days documenting “risk mitigation and acceptance choices made by each agency head as of the date.” - Declares it “the policy of the executive branch to build and maintain a modern, secure, and more resilient executive branch IT architecture.” 1. Section 2: Cybersecurity of Critical Infrastructure - Directs agency heads to classify authorities and mechanisms through which agencies can better support cybersecurity efforts of critical infrastructure. - Mandates investigation and reporting by numerous agencies on federal policies. 1. Section 3: Cybersecurity for the Nation - Addresses consumer cybersecurity to foster a secure internet and enable the growth of a cybersecurity-trained workforce. **Responding to the EO: What Will Change, and How Soon?** Beyond their initial response, agencies are on the hook for responding to the EO annually. Ultimately, it seems like the beginning objective is to raise the level of awareness around cybersecurity within the government and put agency heads on formal notice that they’re going to be responsible. NIST is a major component; they publish the guidelines that the rest of the government should consider and apply, and define requirements for best practices around standing up and configuring data centers, as well as configuring and protecting the networks used by these data centers. The government has already subscribed to these standards, but now that it’s a formal requirement, keeping pace with their best practices, as well as [DISA STIGS](http://www.disa.mil/), at the very least establishes a baseline for achieving and maintaining the strongest possible security posture. At present, the Trump administration’s Cybersecurity Executive Order is in its beginning stages, so it may take some time before there’s significant funding behind it. In the meantime, beyond following common criteria for cybersecurity best practices throughout the federal government, agencies can seek help through reputable cybersecurity partners who have the expertise to advise on enhancing protections. In addition, federal agencies should consider accelerating the process of adopting a cloud strategy in alignment with [FedRAMP](https://www.fedramp.gov/) (Federal Risk and Authorization Management Program), a certification process for federal agency-specific cloud computing, to respond to the EO. [AWS GovCloud](https://aws.amazon.com/govcloud-us/), for example, is a FedRAMP-certified public cloud. Shifting computing capabilities to the cloud is a mandated component of the EO, so the sooner solutions are explored, the better. **Federal Cybersecurity With ASE: We’re Here for Agencies** August Schell understands that federal agencies are in a precarious position given the bounds they’re in to protect what they have. There may be deficiencies in the configuration of networks and environments, and agency resources available to solve this problem are not adequate. Plus, malicious actors will press on, and seem to have limitless resources to achieve their goals while the government’s resources are restricted—we understand that it’s not a favorable equation. August Schell works side-by-side with federal agencies to design, deploy, and optimize security postures. We have an enterprise management and monitoring services practice designed to address many of these challenges.  If your agency needs assistance with making cybersecurity changes based on the EO, or would like to learn more about how you can optimize your internal resources by seeking help, [get in touch with an August Schell specialist](https://augustschell.com/contact-us/), or call us at (301)-838-9470. [GovTech](https://blog.augustschell.com/tag/govtech), [Cybersecurity](https://blog.augustschell.com/tag/cybersecurity), [Cybersecurity Executive Order](https://blog.augustschell.com/tag/cybersecurity-executive-order), [Government Security](https://blog.augustschell.com/tag/government-security) ## Related posts [![threat-intelligence](https://blog.augustschell.com/hs-fs/hubfs/threat-intelligence.jpg?height=200&name=threat-intelligence.jpg)](https://blog.augustschell.com/recorded-future-weapon-choice-effective-threat-intelligence) [Machine Learning](https://blog.augustschell.com/tag/machine-learning), [Recorded Future](https://blog.augustschell.com/tag/recorded-future), [Security](https://blog.augustschell.com/tag/security), [Threat Intelligence](https://blog.augustschell.com/tag/threat-intelligence) ## [Recorded Future as the Weapon of Choice for Effective Threat Intelligence](https://blog.augustschell.com/recorded-future-weapon-choice-effective-threat-intelligence) [Ron Flax](https://blog.augustschell.com/author/ron-flax) May 25, 2017 10:03:10 AM How Machine Learning Can Arm Incident Responders, Threat Analysts, and Security Operators with... [Read more](https://blog.augustschell.com/recorded-future-weapon-choice-effective-threat-intelligence) [![microsegmentation](https://blog.augustschell.com/hs-fs/hubfs/microsegmentation.png?height=200&name=microsegmentation.png)](https://blog.augustschell.com/effectively-protecting-digital-assets-with-microsegmentation) [Cybersecurity](https://blog.augustschell.com/tag/cybersecurity), [Security](https://blog.augustschell.com/tag/security), [VMware](https://blog.augustschell.com/tag/vmware), [microsegmentation](https://blog.augustschell.com/tag/microsegmentation) ## [Effectively Protecting Digital Assets with Microsegmentation](https://blog.augustschell.com/effectively-protecting-digital-assets-with-microsegmentation) [Ron Flax](https://blog.augustschell.com/author/ron-flax) Apr 12, 2018 8:02:00 AM How Microsegmentation Keeps Security Up to Date The Digital World Descends: Securing Traffic from... [Read more](https://blog.augustschell.com/effectively-protecting-digital-assets-with-microsegmentation) [![what-is-fedramp](https://blog.augustschell.com/hs-fs/hubfs/what-is-fedramp.png?height=200&name=what-is-fedramp.png)](https://blog.augustschell.com/what-is-fedramp) [Compliance](https://blog.augustschell.com/tag/compliance), [federal compliance](https://blog.augustschell.com/tag/federal-compliance), [fedramp](https://blog.augustschell.com/tag/fedramp) ## [What is FedRAMP?](https://blog.augustschell.com/what-is-fedramp) [Ron Flax](https://blog.augustschell.com/author/ron-flax) Apr 3, 2018 7:22:00 AM What FedRAMP Means for Agencies and Cloud Providers What is FedRAMP, and Why Does it Matter? [Read more](https://blog.augustschell.com/what-is-fedramp) --- Talk to an Expert `Today.` *[![Contact Us](https://no-cache.hubspot.com/cta/default/4039791/interactive-182720921209.png)](https://blog.augustschell.com/hs/cta/wi/redirect?encryptedPayload=AVxigLIcksy2RTNJKkPJwRIjpoo4Q8r8sMHatkwMRgZQ84qz8DUHGQYZI%2F2Ou2s3d2Giwg87dj%2FwrDOiz6deG0pSN4T%2BfY%2BRgHcSpCBJf%2FmdxeQSUvg8iArKOgC5OY0oUiDsFtHuj%2BTqZCdXoWR9oavvy%2FqJTtgKsw%2FqQYrUMe%2FV%2FdqNhiOKWQ%3D%3D&webInteractiveContentId=182720921209&portalId=4039791)* | Quick Links [Request Quote](https://augustschell.com/quotes/) [Careers](https://augustschell.com/careers/) [Contracts](https://augustschell.com/contracts/) | 1700 Rockville Pike, Suite 405, Rockville MD 20852 (301) 838-9470 [![Screenshot 2024-11-12 at 10.57.50 AM](https://blog.augustschell.com/hs-fs/hubfs/Screenshot%202024-11-12%20at%2010.57.50%20AM.png?width=110&height=22&name=Screenshot%202024-11-12%20at%2010.57.50%20AM.png)](https://www.linkedin.com/company/august-schell-enterprises) | | --- | --- |   | **August Schell** | [Privacy Policy](https://augustschell.com/privacy-policy/) · [Contact Us](https://augustschell.com/contact/) | All rights reserved | | --- | --- | --- |