Obama may issue order Wednesday on defense against cyber attacks - sources

WASHINGTON Tue Feb 12, 2013 9:19am IST

U.S. President Barack Obama speaks at the Armed Forces Farewell Tribute in honor of Defense Secretary Leon Panetta at Joint Base Myer-Henderson in Washington February 8, 2013. REUTERS/Kevin Lamarque

U.S. President Barack Obama speaks at the Armed Forces Farewell Tribute in honor of Defense Secretary Leon Panetta at Joint Base Myer-Henderson in Washington February 8, 2013.

Credit: Reuters/Kevin Lamarque

WASHINGTON (Reuters) - U.S. President Barack Obama plans to release a long-awaited executive order aimed at improving the nation's defenses against cyber attacks as early as Wednesday, according to sources familiar with the matter.

The order, drawn up after Congress failed to pass cyber defense legislation last year, is meant to improve the protection of critical industries and infrastructure from cyber intrusions.

Concerns about cyber attacks, which have hit a succession of major U.S. companies and government agencies in recent months, also could be raised by Obama in his annual State of the Union address to Congress on Tuesday evening.

One of the White House's major goals is to improve information-sharing about attacks among private companies, and between companies and the government.

"Our biggest issue right now is getting the private sector to a comfort level so they can report anomalies, malware, incidents within their network" without undue fear of being "outed" as victims, said FBI Executive Assistant Director Richard McFeely, head of the Criminal, Cyber, Response and Services Branch.

The order is expected to give the Department of Homeland Security (DHS) the lead role in protecting critical U.S. infrastructure, according to a government official who had seen a final draft of the order's executive summary.

DHS will be tasked with setting up a system for sharing cyber threats with private industry and be responsible for protecting critical infrastructure, the official said. Most of the critical U.S. infrastructure is run by private industry.

"We know the executive order isn't going to go as far as legislation could or will go, but it's a good start," the official said.

Some Republicans had wanted the Department of Defense to play the lead role instead of DHS.

Cyber security experts say the executive order - which does not have the same force as a law - is a step in the right direction and indicates Obama takes the problem seriously.

"I think this can fairly be described as a down payment on legislation," said Stewart Baker, former National Security Agency general counsel and a past assistant secretary for policy at the Department of Homeland Security.

Stewart said he thought the executive order would make a difference in policy and practical terms "but whether it will provide practical protection from cyber attacks is still in doubt."

The executive order will make it easier for people at private companies to get security clearances so classified information can be shared, according to earlier drafts that were leaked and posted online.

It will also make companies work with the National Institute of Standards and Technology to come up with sector-specific standards for cyber security and will then require companies to engage with their regulators to decide how those standards are implemented.

"Companies aren't going to, at first, be required to do anything. These are voluntary standards, except for a few critical infrastructure companies," said James Lewis, senior fellow at the Center for Strategic and International Studies.

"If you're regulated, the regulator will be able to say, 'Here are some new standards.' If you're not regulated you won't be touched at all." (Reporting By Steve Holland, Deborah Charles and Joseph Menn. Writing by Warren Strobel; Editing by Cynthia Osterman and Todd Eastham)

FILED UNDER:

Online Shopping

An empty shopping cart is seen outside a Best Buy store in Westbury, New York November 28, 2014. REUTERS/Shannon Stapleton

BestBuy.com back online after second Black Friday outage

Best Buy Co Inc's retail website is back online after it was down for a second time on Black Friday, the busiest U.S. shopping day in terms of sales and traffic since 2005, according to ShopperTrak.  Full Article 

REUTERS SHOWCASE

Gold Imports

Gold Imports

India eases gold import rule in surprise move.  Article 

Indians in Iraq

Indians in Iraq

India says no contact with 39 men held by Islamic State in Iraq.  Full Article 

Sahara Issue

Sahara Issue

Sahara looks to raise $650 million loan to fund bail.  Full Article 

Bhopal Tragedy

Bhopal Tragedy

Bhopal's toxic legacy lives on, 30 years after industrial disaster.  Full Article 

Banking Sector

Banking Sector

After record deal, more India bank takeovers on cards  Full Article 

Islamic Fund

Islamic Fund

India gets new Islamic equity fund but debt market still off-limits  Full Article 

Cricket Tragedy

Cricket Tragedy

Clarke breaks down giving heartfelt Hughes tribute  Full Article 

Nigeria Violence

Nigeria Violence

Bombs, gunfire kill 81 at crowded mosque in Nigeria's Kano  Full Article 

Movie Review

Movie Review

D’Silva's “Ungli” just skims the surface  Full Article | Related Story 

Reuters India Mobile

Reuters India Mobile

Get the latest news on the go. Visit Reuters India on your mobile device  Full Coverage