Take fight to the enemy, US cyber boss says

""As a country we have not done a terrific job sending a signal to our adversaries that this behavior is not consequence-free," Cairncross said, adding that he wants the new National Cyber Strategy to introduce cost and consequences into the mix for America's adversaries that keep hitting US critical infrastructure."

""There has never been a top-cover strategy," Cairncross said. "What we haven't been good at is saying 'what can we do over the course of 12 months to really put a dent in the incentive to engage in this sort of behavior?'""

""The private sector is responsible for our critical infrastructure. It's a design of our system," Cairncross said. "It's a double-edged sword. It makes it somewhat more disparate and harder to protect, but there is a way to do this collaboratively that is effective.""

A concise National Cyber Strategy will pair policy with actions that go beyond improving defensive posture. The strategy will authorize measures to impose costs and consequences on foreign threat actors targeting U.S. critical infrastructure. Current capabilities in identifying and remediating cyber threats are strong across government and private companies, but incident response remains fractured and lacks a long-term cohesive approach. The new strategy will unify efforts under six pillars and create a single coordinated framework. Public-private cooperation will be central because the private sector owns and operates most critical infrastructure.

Read at Theregister