An Examination of National Level Cybersecurity Policies

Using national policy, governments are establishing the strategy and governance for managing their nation’s cybersecurity, providing leadership and guidance to public and private sector organizations, and allocating resources required to protect national interests against foreign adversaries and cybercriminals. This paper analyzes the business impact, implementation and enforcement, scope, and explores potential improvements for two national-level cybersecurity policies: US Executive Order 14028, Improving Critical Infrastructure Cybersecuity, signed by Joseph R. Biden in 2021 and the United Kingdom National Cyber Strategy 2022. The paper also examines the appropriateness of each policy and compares the two policy approaches, noting similarities and differences between the two policies.