On Friday, December 2, 2016, the White House Commission on Enhancing National Cybersecurity (the Commission) released its much anticipated report, detailing six major "imperatives," 16 recommendations and 53 action items. The Commission was a part of the Obama Administration's Cybersecurity National Action Plan (CNAP), which we previewed here earlier in the year. The Commission includes 12 members representing a bipartisan, private sector group of individuals with backgrounds in key sectors, law enforcement, security and academia.

The report makes clear that "Cybersecurity is now an explicit consideration as organizations in the private sector and at all levels of government review their workforce readiness and needs." During the course of 2016, the Commission focused on ten major issues: federal governance; critical infrastructure; cybersecurity research and development; cybersecurity workforce; identity management and authentication; Internet of Things; public awareness and education; state and local government cybersecurity; insurance and international issues.

The report lays out six major Imperatives, calling on the U.S. government and Congress to work collaboratively with the private sector from creating new partnerships to better protect U.S. companies, to streamlining regulations, to creating a "Consumer Bill of Rights."

  • Imperative 1: Protect, Defend and Secure Today's Information Infrastructure and Digital Networks
  • Imperative 2: Innovate and Accelerate Investment for the Security and Growth of Digital Networks and the Digital Economy
  • Imperative 3: Prepare Consumers to Thrive in a Digital Age
  • Imperative 4: Build Cybersecurity Workforce Capabilities
  • Imperative 5: Better Equip Government to Function Effectively and Security in a Digital Age
  • Imperative 6: Ensure an Open, Fair, Competitive and Secure Global Digital Economy

The report was intended to create a roadmap for the next Administration, identifying and offering specific action items designed to address the cybersecurity and privacy needs of consumers, the private sector and government. The President's statement on Friday also asks the Commission to brief the President Elect's Transition team.