WASHINGTON—U.S. Senator Mike Rounds (R-S.D.), a member of the Senate Armed Services Committee (SASC), today will introduce the Cyber Act of War Act of 2016. The Cyber Act of War Act of 2016 would require the administration to develop a policy to determine whether a cyber-attack constitutes an act of war.
“With the Internet playing a major role in nearly every aspect of our lives, we not only face the threat of losing our personal information online, but we are at risk of having our daily lives interrupted by cyber-attacks that have the ability to cripple our power grid, water supplies and communications networks,” said Rounds. “Cyber-attacks on our critical infrastructure are capable of impacting our entire economy and causing significant destruction. This legislation would require the executive branch to define which of these actions constitute a cyber act of war, which would allow our military to be better able to respond to cyber-attacks and deter bad actors from attempting to attack us in the first place.”
During a February 9, 2016, SASC hearing, Rounds questioned Director of National Intelligence James Clapper, Jr., and Lt. Gen. Vincent Stewart, Director of the Defense Intelligence Agency, about whether it would be helpful to define an act of war in cyber space. Lt. Gen. Stewart responded, “I think it would be extremely helpful to have clear definitions of what constitutes cyber events versus acts of war…if we get much fuller definition of the range of things that occur in cyber space, and then start thinking about the threshold where an attack is catastrophic enough or destructive enough that we define it as an act of war, I think that would be extremely useful.”
It is now time to arrive at this definition. On Monday I am introducing the Cyber Act of War Act of 2016, which would require the administration to define what constitutes an act of war in cyberspace. The administration would be required to consider the ways in which the effects of a cyberattack may be equivalent to the effects of an attack using conventional weapons, as well as the intangible effects of significant scope, intensity or duration.
America needs a clear and concise definition of when an attack in cyber space constitutes an act of war. The executive branch needs such a definition so it can fully formulate policies governing, for example, when it might be appropriate for the U.S. to undertake offensive operations against a cyber adversary.
The Cyber Act of War Act is a step toward removing dangerous ambiguity and arriving at a sensible policy. By clearly defining what constitutes a cyber act of war, the nation will be better able to respond to a cyberattack and better deter bad actors from attempting an attack on the U.S. in the first place. Recent events have shown how urgently action is needed.