With just days left in the White House, President Biden has issued an executive order aimed at strengthening U.S. cybersecurity, which requires software vendors to prove that they’re using secure development practices in order to win or retain government contracts.
Although the larger goal is to strengthen the country against cyberattacks from China, Russia and Iran among others, Biden’s order singled out China as the “most active and persistent threat” to the U.S. government, private sector, and infrastructure networks.
“These cyber campaigns disrupt the delivery of critical services across the nation, cost billions of dollars, and undermine Americans’ security and privacy,” Biden continued. “More must be done to improve the nation’s cybersecurity against these threats.”
The order also requires government agencies to start using systems that can guard against hackers using quantum computers, and makes it easier to sanction groups targeting schools, hospitals and other pieces of critical infrastructure.
In December, a hacker sponsored by China broke into U.S. Treasury Department systems to remotely access work stations and unclassified documents, after stealing a security key used for technical support. Chinese hackers also breached U.S. government email accounts in 2023, as well as eight major U.S. telecom companies the following year.
Although it’s unclear whether the incoming Trump administration will keep in place what will likely end up being one of Biden’s final acts as president, Biden’s office told NPR that it believes both parties have a vested interest in bolstering the nation’s cybersecurity infrastructure.
