Amidst the barrage of cyber announcements made during the annual RSA conference, you might have missed the release of the United States International Cyberspace & Digital Policy Strategy.
Building off of the Office of the National Cyber Director’s foundational National Cybersecurity Strategy, the U.S. Department of State’s international strategy underscores the importance of building digital solidarity with international partners. This means creating and governing a digital ecosystem that defends against malicious cyber actors, while reliably delivering assistance and building resilience among partners. These principles of an innovative, secure, and rights-respecting digital economy stand in sharp contrast to the increasing number of autocratic states and actors that use digital tools to threaten international stability and undermine human rights.
Solidarity vs. Sovereignty
It is no coincidence that “digital solidarity” is the underlying, driving philosophy of this strategy, setting the tone for how the U.S. will approach diplomatic engagements with allied nations, as well as those embracing narratives of “digital sovereignty.”
Digital sovereignty is characterized by protectionist tendencies, including blocking access to economic markets, preferring domestic manufacturers and service providers, and restricting cross-border data flows. These actions have the potential to undermine key digital economic and cybersecurity objectives and stand as the clear antithesis to the U.S.’s stance against data localization provisions, network usage fees, digital services taxes, and other market access barriers that may give the illusion of increased control but actually pose security threats.
Therefore, to build greater digital solidarity, the international strategy lays our four key areas of action:
- Promote, build, and maintain an open, inclusive, secure, and resilient digital ecosystem.
- Align rights-respecting approaches to digital and data governance with international partners.
- Advance responsible state behavior in cyberspace, and counter threats to cyberspace and critical infrastructure by building coalitions and engaging partners.
- Strengthen and build international partner digital and cyber capacity.
Short-Term Initiatives
While these overarching action areas will guide the State Department’s work over the next three to five years, the strategy does make note of a few shorter-term initiatives that we can keep our eye on.
The strategy states the U.S., allies, and partners will:
- Build on the positive outcomes of several recent actions on artificial intelligence, including G7-Hiroshima Code of Conduct, the Biden-Harris Executive Order on AI, and the UK’s AI Safety Summit. The focus is on coming to consensus on guiding principles that foster the responsible, innovative use of AI, while investing in the infrastructure needed to evaluate advanced AI systems. The U.S. will also be launching its AI Safety Institute, housed in the National Institute of Standards and Technology (NIST).
- Develop shared principles for security and trustworthiness in subsea cable, cloud services, and data centers, and will increase support for cloud service implementation in emerging economies.
- Pursue action-oriented discussions at the United Nations on international security issues in cyberspace, with a focus on how member states can work collaboratively to implement key elements of the framework for responsible state behavior and build the necessary capabilities to manage cyber incidents. (A previous blog breaks down the current state of the UN’s cybercrime convention, a vehicle through which autocratic nations like Russia, and China seek to undermine human rights, free speech, and ethical security research.)
- Utilize the Cyberspace, Digital Connectivity, and Related Technologies Fund to provide incident response, and cyber aid, in addition to longer-term capacity and resilience building to foreign governments and organizations in need.
As the State Department continues its work to advance the security, inclusion, and resiliency of our shared, global cyberspace, they face increasing headwinds from geopolitical instability. If they can bring allies and partners along with their vision of digital solidarity, they will be better positioned to confront the cyber activities of increasingly emboldened authoritarian regimes.
Read Next
EU’s Cyber Resilience Act Enters Into Force
New product cybersecurity requirements are coming to the EU single market after years of intense debate and negotiation in Brussels, as the European Union’s Cyber Resilience Act officially enters into force.
Through the Looking Glass: An Updated Vision for the Office of the National Cyber Director
The ONCD was established to advise the President on cybersecurity and has matured into a key component of cybersecurity policymaking. However, changes are needed to ensure the efficacy of the office, especially as it relates to other agencies.
The U.S. Data Security EO with Lee Licata and Grant Dasher (Part 2)
For the first time in the Distilling Cyber Policy podcast, Alex and Jen are re-joined by guests from earlier this season: Lee Licata, from the Department of Justice, and Grant Dasher, from CISA.