US moves to better protect infrastructure from cyber threats

The actions, outlined in an order being signed by President Joe Biden, are an acknowledgment of the cybersecurity vulnerabilities of critical industries — a reality made clear by the May hack of the nation's largest pipeline, which delivers about 45 per cent of the fuel consumed on the East Coast.

But they're also meant to address the “patchwork of sector-specific statutes'' that have been adopted piecemeal over time and that leave the government without a uniform or adequate cybersecurity threshold, according to a senior administration official who briefed reporters before a formal announcement.

The partnership was launched as a pilot program in April with electricity utilities, and additional alliances with other sectors will be formed this year. It comes as federal officials have been promoting greater cybersecurity resiliency among private companies, including announcing new requirements and protections for pipeline operators last week.

The partnership is voluntary, though the administration has not ruled out the possibility of mandatory requirements in the future, the official said. But short of legislation, the official said, “there isn't a comprehensive way to require deployment of security technologies and practices that address, really, the threat environment that we face.” In addition, Wednesday's order will direct the departments of Homeland Security and Commerce to develop cybersecurity performance goals for critical infrastructure.