On June 7, 2025, US president Donald Trump signed an executive order that reverses several cybersecurity policies established by former presidents Barack Obama and Joe Biden.

The administration said that the revisions aim to prioritize current cybersecurity issues while addressing inherited policies.

One major change is the removal of a provision from Biden’s order that encouraged federal agencies to accept digital identity documents for public benefit programs.

The White House argued that this could lead to improper access to benefits by individuals without legal status. Mark Montgomery, a senior director at the Foundation for Defense of Democracies, criticized this decision.

He suggested it favors immigration concerns over cybersecurity advancements.

The executive order also addresses AI in cybersecurity. It directs federal research programs to explore AI security applications.

🔗 Source: TechCrunch

🧠 Food for thought

1️⃣ US cybersecurity policy pendulum swings between compliance and flexibility

Trump’s executive order marks the latest shift in a recurring pattern where administrations alternate between compliance-focused and flexibility-oriented cybersecurity approaches.

Obama’s administration built comprehensive regulatory frameworks through initiatives like the Comprehensive National Cybersecurity Initiative (CNCI) and the Cybersecurity National Action Plan (CNAP), establishing foundational security requirements for federal agencies 12.

These frameworks emphasized structured approaches to cybersecurity with specific compliance requirements, investing $19 billion in the 2017 budget proposal for cybersecurity initiatives 2.

Trump’s new order explicitly moves away from what his administration calls “unproven and burdensome software accounting processes” toward operational flexibility, removing requirements for federal contractors to attest to their software security 3.

This reflects a fundamental tension in US cybersecurity governance between prescriptive security requirements and allowing organizations flexibility in implementation—a debate that has persisted across multiple administrations.

2️⃣ Geopolitical tensions increasingly shape cybersecurity policy direction

The explicit focus on foreign threats in Trump’s executive order continues a trend of cybersecurity policy being shaped by international relations and geopolitical concerns.