	Introduction

Comprehensively addressing national cybersecurity-related issues is a difficult task because of a number of technical and policy considerations. The Obama Administration declared that U.S. critical information infrastructures are a strategic national asset in a May 29, 2009, speech by the President. However, just as there is no single congressional committee that can claim primary jurisdiction over cyberspace, neither is there a single executive agency or department with sole cybersecurity responsibility or commensurate authorities. Recent Initiatives Addressing U.S. Cybersecurity Concerns

Since 2008, numerous executive branch, legislative, and think tank recommendations and proposals have been offered to address various aspects of ongoing and emerging cybersecurity issues. The Comprehensive National Cybersecurity Initiative (CNCI), the Center for Strategic and International Studies (CSIS) Commission on Cybersecurity for the 44 th Presidency, and the White House 60-Day Cyberspace Policy Review (commonly referred to as the 60-Day Cyber Security Review) are the most current attempts to frame the issue and are often referred to when discussions arise regarding how best to identify challenges and implement changes to the current U.S. approach to cybersecurity. These broad themes are used to compare current policy and legislative proposals with executive branch initiatives. A description of selected executive branch initiatives is followed by a comparison matrix that illustrates trends in cybersecurity efforts. Overview lists and summaries of the cybersecurity-related legislation are found in the Appendix . The Administration's 60-day review's near-term action plan calls for preparing and updating a new national strategy for securing communications and information infrastructure. As this legislation is marked up, alternative proposals may be considered. The proposed S. 733 in its initial version contained provisions for presidential cybersecurity authorities. Rewrites of this legislation reportedly may revise this provision. Assessing current congressional committee jurisdiction. Other responsibilities would be ensuring "the security and privacy of the federal information technology infrastructure and networks" and "coordinating closely with other federal departments and agencies having responsibilities regarding security and privacy of the infrastructure and networks." 2647 National Defense Authorization Act for Fiscal Year 2010 
Status of bill: Awaiting conference. S. 1494 Intelligence Authorization Act for Fiscal Year 2010 
Status of bill: Passed/agreed to in Senate.
Increasing focus on current cyber threats to federal information technology systems, nonfederal critical information infrastructure, and other nonfederal systems has led to numerous legislative cybersecurity proposals and executive branch initiatives. The proposed National Defense Authorization Act for Fiscal Year 2010 (NDAA FY2010) and the Intelligence Authorization Act for Fiscal Year 2010 (IIA FY2010) both contain provisions that would affect programs and funding for current and future cybersecurity-related programs. In May 2009, the Obama Administration issued its 60-day review of cybersecurity policy, declaring that U.S. information networks would be treated as a strategic national asset.
There is no single congressional committee or executive agency with primary responsibility over all aspects of cybersecurity; each entity involved pursues cybersecurity from a limited vantage point dictated by committee jurisdiction. Many different initiatives exist, but because of fragmentation of missions and responsibilities, "stove-piping," and a lack of mutual awareness between stakeholders, it is difficult to ascertain where there may be programmatic overlap or gaps in cybersecurity policy.
Drawing from common themes found in the Comprehensive National Cybersecurity Initiative (CNCI), a study by the Center for Strategic and International Studies (CSIS) Commission for the 44th Presidency, and the proposed near-term action plan from the President's recent Cyberspace Policy Review, this report identifies cybersecurity policy issues that have been proposed for priority consideration. The report lists and synopsizes current legislation at the time of this writing that has been developed to address various aspects of the cybersecurity problem. It then lists the status of the legislation and compares legislation with existing executive branch initiatives at the time of writing. Finally, analysis of information contained in executive branch initiatives and congressional legislation is used to further highlight cybersecurity-related considerations for Congress.
This report will not be updated.