Insider Brief
- President Joe Biden issued a comprehensive executive order to bolster U.S. cybersecurity, focusing on leveraging artificial intelligence and preparing for threats posed by quantum computing.
- The directive mandates federal agencies to deploy AI-driven defenses, prioritize quantum-resistant encryption, and hold software vendors accountable for secure practices.
- Aimed at deterring adversaries like China and ransomware criminals, the order emphasizes bipartisan support for safeguarding critical infrastructure and strengthening the nation’s cyber resilience.
In one of his last actions as the United States’ chief executive, President Joe Biden issued a sweeping executive order to strengthen the nation’s cybersecurity, emphasizing the dual powers of artificial intelligence (AI) and quantum computing technologies’ as both tools of transformation and emerging threats. The directive includes measures to secure critical software, protect digital infrastructure and prepare for quantum-resistant encryption.
The order prioritizes enhancing AI’s role in cybersecurity, directing federal agencies to explore AI-driven defenses, such as automated threat detection and vulnerability management. By leveraging AI to identify cyber risks at scale, the administration aims to bolster protections for critical infrastructure, including energy systems. Within 180 days, the Department of Energy, in collaboration with other agencies, will pilot AI-based programs to assess their effectiveness.
“The goal is to make it costlier and harder for China, Russia, Iran and ransomware criminals to hack, and to also signal that America means business when it comes to protecting our businesses and our citizens,” said Anne Neuberger, Biden’s outgoing Deputy National Security Advisor for Cyber and Emerging Technology, during a call with journalists, as reported by NPR.
AI research funding will also see a boost, with agencies such as the National Institute of Standards and Technology (NIST) tasked with advancing secure AI systems and ensuring datasets for cybersecurity research are accessible. This effort reflects the growing concern over AI’s dual-use nature, as malicious actors could exploit it for sophisticated attacks.
On the quantum computing front, the order highlights the technology’s potential to break current encryption methods, posing a significant national security risk. The Department of Homeland Security will compile and regularly update a list of products supporting post-quantum cryptography—encryption methods designed to resist attacks from quantum computers, according to the executive order. Federal agencies are directed to adopt these technologies for secure communications and data protection.
Why This Is Important For Quantum Industry
The executive order’s explicit direction to federal agencies to adopt quantum-resistant encryption and prioritize research into post-quantum cryptography is highly significant for quantum vendors. By requiring government procurement to include products that support these technologies, the order signals a potential increase in demand for quantum-secure solutions.
The focus on quantum computing as both an opportunity and a risk also highlights quantum computing’s growing strategic importance. This increasing important is likely to push major corporations and large organizations to shift their quantum adoption efforts from long-term to more immediate planning.
The executive order could also be seen as another factor that is raising general awareness of the international importance of quantum computing.
Ambitious Timeline
The timeline for this transition is ambitious, with preliminary steps required within months and full adoption of quantum-resistant protocols by 2030. The move aligns with ongoing efforts under the National Cybersecurity Strategy to mitigate risks associated with quantum advancements while promoting U.S. leadership in the field.
To address the broader cybersecurity landscape, the order expands requirements for software providers. Vendors must attest to secure development practices and submit artifacts — digital evidence of compliance — for government review. Non-compliance could result in public disclosure and legal action. The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) will oversee the verification process.
Recognizing the vulnerabilities posed by supply chain dependencies, the order mandates agencies integrate cybersecurity measures throughout the procurement lifecycle. This includes stricter standards for open-source software, which federal systems heavily rely on.
Experts view the directive as a necessary response to growing threats from adversarial nations like China, which the order identifies as the most persistent cyber aggressor. The focus on AI and quantum technologies underscores the administration’s intent to address emerging risks while leveraging innovation for defense.
The executive order builds on the administration’s previous cybersecurity initiatives.
There is the possibility that President-elect Donald Trump’s administration could rescind the policy to enact its own plan. However Neuberger said the order’s twin goals of bolstering cybersecurity and punishing cybercriminals have bipartisan support, AP reports.
