Of the many policy priorities for the Trump administration, how it tackles the cybersecurity and data privacy challenges facing the country will have a significant impact on the economy, national security and civil liberties. From the escalating hacking episodes by nation-states and calls to develop significant offensive cybersecurity capabilities, to combating cybercrime and improving critical infrastructure protection, there are no shortage of challenges facing the new administration.
In his press conference as president elect, Trump announced he will release a report in the next 90 days outlining the administration鈥檚 approach to cybersecurity and he is set to pay off that promise with an aimed at reviewing current vulnerabilities in Federal systems and devising plans to defend critical infrastructure. Like several other major policy issues presented by the administration, it鈥檚 unclear how detailed the report and approach will be. However, one thing is clear: it will inevitably involve collaboration with the private sector through his new cybersecurity advisor, Rudy Giuliani.
Importantly, this new environment will also present potential challenges for businesses, but also potential opportunities to build common ground with the new administration. The following are major security and privacy areas where we are likely to see developments that companies will need to navigate:
Hardening the Federal Government and Business from Attacks
President Trump has said time and again that he believes the United States is 鈥渂eing hacked by everybody,鈥 citing the loss of millions of records by the Office of Personnel Management and that found federal agencies are less secure than every other private sector industry. It鈥檚 likely that hardening the Federal government and critical infrastructure from attacks will be part of Trump鈥檚 plan and an area where he will seek advice from the private sector.
For businesses with significant amounts of data, technology companies and those developing security solutions, President Trump鈥檚 focus on engaging the private sector could provide an opportunity for industry experts to offer insight into the major challenges (technical, operational, etc.) that exist in protecting both the private and public sector from attacks.
This attention is likely to also bring risk for businesses. If there is a breach of U.S. government systems, it will be viewed as a major failure, and the technology behind it will be at risk of receiving significant scrutiny from the President. Likewise, companies that are victims of big consumer breaches risk criticism for failing to protect Americans.
Cybersecurity as a National Security Priority
With revelations of Russian hacking aimed at disrupting the presidential election, it鈥檚 clear that we are likely to see more international conflicts taking place in cyberspace. The Trump administration has already indicated it will invest in offensive cyberweapons and will not shy away from using them, either as a deterrent or as a response to an attack. And, with no clear rules of engagement for the use of cyber-capabilities, the potential for a disproportionate response is much more likely than with traditional conflicts.
While intelligence agencies and the Department of Defense have greatly increased their capabilities to gather intelligence on foreign nation-state attacks, security companies also have strong capabilities in this space. It鈥檚 possible that this new focus could lead to greater opportunities for threat intelligence sharing and a greater role for the private sector to play in helping shape the administration鈥檚 strategy moving forward.
At the same time, this new environment will create increased risk for companies. As evidenced by previous attacks on Sony Pictures and many critical infrastructure providers over the past few years, it鈥檚 possible that businesses will be caught in the middle and end up victims of advanced attacks due to an international cyber-conflict.
Collective Action Against Cybercrime and Consumer Fraud
Trump is viewed as a law and order President. In addition to bolstering cyber-related funding and establishing new areas of focus within the Federal Government, one area where he may be able to make some traction is by taking more aggressive action against cybercriminals. Recently, the FBI took down a major with the assistance of the private sector. Presumably these types of actions will continue to be a focus for federal law enforcement and could provide positive examples that Trump can cite to show he is successfully tackling cybersecurity.
Most of these actions require close collaboration with the private sector, who often have the intelligence and technical capability necessary to assist law enforcement. This creates another area for potential bridge-building and collaboration with the new administration.
Privacy and Security at Odds
President Trump鈥檚 focus on national security will likely lead to increased concerns around data privacy for citizens and foreign consumers. Following the fight last year between Apple and the FBI over the use of encryption to protect communications on the iPhone used by the San Bernardino shooter, we are likely to see more companies asked to compromise the security of their products in the interest of national security. It鈥檚 also possible we will see more companies receive requests from the government for information they have on their consumers to aid in intelligence gathering.
Ultimately, this new approach will lead to significant scrutiny of companies by the privacy advocacy community, foreign data protection regulators and media. It will also lead to potential challenges for companies that do business abroad, where international governments are very sensitive to the potential exposure of information about their citizens to the U.S. government. This tension has already presented significant headaches for U.S. companies looking to collect and use data on European citizens.
While it remains to be seen how these issues will play out over the course of Trump鈥檚 time in office, it鈥檚 clearly an area that all businesses need to consider as part of their engagement with the new administration.
Andy Liuzzi is an executive vice president in Chicago.
Leigh Nakanishi is a senior vice president in New York.