America isn’t optimizing its digital defenses. Today, U.S. government efforts to defend information systems, protect critical infrastructure, and respond to incidents are based on a combination of Department-by-Department actions, frequently isolated regulations, and an uneven culture of information-sharing between industry, government, and the security research community. Although there are many positive initiatives underway, the current environment can be characterized more as independent actions with brittle boundaries than a sufficiently empowered government organization.
