Senator King on the Lack of Cyber Deterrence and the Need for Retaliation

The Absence of Cyber Deterrence

• 💡 Cybersecurity deterrence is a critical national security strategy, yet it is notably absent in the cyber domain.
• ⚠️ Unlike other military and national security approaches, the US faces continuous cyber attacks without significant repercussions for adversaries.
• 🎯 Attacks like Salt Typhoon and the Sony hack are cited as examples where adversaries faced no consequences.

The Cost of Inaction

• 💰 Adversaries, such as those in the Kremlin, are incentivized to conduct cyber attacks because they are cheap and carry no real risk.
• 🚀 The lack of a price to be paid means these attacks will continue unabated.
• ⚡ Without imposing costs, the current strategy is insufficient to prevent ongoing cyber threats.

The Need for Retaliatory Capacity and Will

• 🔑 A stronger retaliatory capacity and the demonstrated will to use it are essential to deter cyber attacks.
• 🧠 Deterrence requires not only capacity but also the adversary's knowledge that they are at risk.
• ⚠️ The current doctrine is lacking, as deterrence is ineffective if the adversary is unaware of the consequences.

Developing a Credible Cyber Deterrent

• 🛠️ While the US possesses the capacity for cyber defense and offense, a clear doctrine for deterrence is missing.
• 🤝 Collaboration with private sector partners and developing defenses are important, but cannot fully address the issue.
• 🎯 A credible deterrent must exist, making it clear to adversaries that attacking in cyberspace will result in a tangible price, which may not necessarily be a cyber response.
• 💬 Further details on capabilities and options can be provided in closed sessions.