Many Hands in the Cookie Jar: Case Studies in Response Options to Cyber Incidents Affecting U.S. Government Networks and Implications for Future Response

The 2020 revelations of cyber espionage targeting multiple U.S. government and private sector organizations highlighted the continuing challenge of cyber-enabled espionage. This report describes major cyber incidents affecting U.S. government systems and addresses whether U.S. responses have changed over time, whether they led to changes in adversary behavior, and what the United States can learn from these cases to inform future policymaking.