On 11 March 2020, the 2019 National Defense Authorization Act (NDAA) directed Cyberspace Solarium Commission (CRC) Report was released. The CSC was tasked to conduct a bipartisan review of cyber threats to the US and provide strategic guidance and policy recommendations on how to better defend the nation against those threats. The report contains 83 recommendations spread across six pillars.
A key enabling recommendation – 6.1.6: Require Department of Defense to Define Reporting Metrics – will no doubt be part of the 2021 NDAA. The purpose of this MORS workshop is to begin to define these metrics by bringing key players across the cyber domain together to discuss, game plan, and determine a way ahead that incorporates the combined skill and knowledge of the communities. Similar to April 2019’s Urban Operations Special Meeting, a hybrid mini-symposium is planned that will include a group discussion – on the last day – focused on development and refinement of promising metrics. Given the topic, this Special Meeting will at least be restricted to U.S. Government Agencies and their contractors.