On June 6, 2025, President Trump signed Executive Order “Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity and Amending Executive Order 13694 and Executive Order 14144,” marking a significant recalibration of federal cybersecurity policy during preserving core frameworks established during previous administrations.
The order revises Obama and Biden-era policies yet maintaining fundamental structures for defending digital infrastructure and securing critical digital services.
The executive order substantially reorients cybersecurity priorities toward foreign adversaries, explicitly identifying China as the primary threat, followed by Russia, Iran, and North Korea. Cybersecurity-related sanctions now apply exclusively to foreign malicious actors, with clear exclusions for domestic political activities and election-related matters. This revision prevents potential misuse of cyber sanctions against U.S. citizens and entities as it concentrates federal resources on foreign cyber operations targeting critical infrastructure.
Federal cybersecurity sanctions now target only foreign adversaries while explicitly protecting domestic entities from potential government overreach.
Supply chain security receives improved attention through mandated federal action to secure third-party software supply chains and advancement of secure software development practices across agencies.
Nevertheless, the order removes previous requirements for secure software attestations and technical hardening tied to identity and email security. The administration directs adoption of machine-readable policy standards for implementing cybersecurity measures in addition to updating policies to address software and supply chain vulnerabilities.
The order underscores preparation for emerging technological threats through government-wide focus on post-quantum cryptography and coordinated agency efforts addressing encryption and quantum readiness. These measures guarantee preparedness for quantum-enabled cyberattacks on public networks while supporting long-term adoption of quantum-resilient technologies.
Artificial intelligence cybersecurity work refocuses on vulnerability management rather than censorship or content moderation, whereas formal trust designations and machine-readable security standards for Internet of Things products receive priority.
The administration requires departments to address unique risks from connected devices in federal systems while promoting transparency regarding which consumer devices meet federal security standards. Federal agencies receive greater discretion in implementing cybersecurity priorities compared to more prescriptive requirements under previous administrations.
The order eliminates mandates for U.S. government digital IDs for undocumented immigrants, citing fraud concerns, and removes certain digital identity documentation requirements embedded in previous orders. The OSTP and ONCD issued the directive, which specifically exempts National Security Systems recognized by the Defense Department or Intelligence Community from sections 1 through 7 of Executive Order 14144.
These changes reflect broader policy shifts while maintaining crucial cybersecurity infrastructure protections.
