Trump Administration Targets Previous Cybersecurity Frameworks in Policy Overhaul

Trump Administration Targets Previous Cybersecurity Frameworks in Policy Overhaul

• President Trump has signed an order rolling back parts of cybersecurity policy set by the Biden and Obama administrations.
• The administration says it wants simpler rules and more room for the private sector.
• Critics worry that fewer requirements could raise risk.
• Industry reaction is mixed, with calls to balance security and innovation.

The Trump administration is rolling back cybersecurity policies set under Presidents Biden and Obama. On June 6, 2025, President Trump signed Executive Order 14306, which amends Biden’s January 2025 cybersecurity order (EO 14144) and an Obama-era sanctions order (EO 13694). The White House says the goal is to streamline policy and lean more on the private sector. The debate over regulation, risk and innovation is heating up.

What the order changes

The overhaul is a clear break from the previous approach, with more emphasis on working with private companies. Supporters say it will allow faster innovation and more flexibility, and it removes requirements some saw as getting in the way of security work.

Fewer mandates for industry

The administration argues that simpler rules will let companies set their own security priorities and adapt faster. The aim is a security system that responds quickly to new threats without waiting on bureaucratic approval.

The case against deregulation

Critics worry that loosening rules in an area as critical as cybersecurity could lead to gaps. Less oversight, they fear, could embolden criminals. Calibration matters.

How industry is reacting

The move has drawn wide attention. Big tech welcomed it. Others urged caution, arguing that a short list of baseline security requirements, such as secure software development practices for government suppliers and basic protections for federal systems, should stay in place no matter how much else gets cut.

A bigger role for companies?

Private companies will have a larger role under the new approach, since they hold much of the expertise. Industry leaders are being asked to help write policies that cut paperwork without weakening security basics.

What to watch next

The order is a major shift in cybersecurity strategy, replacing what the administration sees as outdated rules with a leaner, more cooperative approach. Whether it strengthens national defenses or opens new gaps is hotly debated.

The open question is whether industry, with more freedom, can protect national interests without the guardrails of strong oversight. Finding that balance will dominate the debate in the coming months.

Everyone with a stake will need to rethink old assumptions.

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.