The US doesn't just need a cyber policy, it needs a cyber doctrine

On November 8, in The Hill, Morgan Chalfant reported that the 2018 National Defense Authorization Act will require the Trump administration to develop a national cyber policy, which will include defining acts of war in cyberspace. It will not, however, include a doctrine of cyberwarfare.

Defining a cyber policy is necessary—we need to know who executes which action—but the lack of a strategic doctrine means we still won’t have principles that govern our priorities or our actions in cyberspace. Failing to have a governing cyber doctrine will leave the U.S. more vulnerable to future cyber threats.