US President Donald Trump on 13 June signed a sweeping national security memorandum that significantly expands the authority of the National Security Agency (NSA), restructures oversight of government cyber networks, and sets new cybersecurity requirements for systems used by the US military, intelligence agencies, and other national security institutions.

The directive establishes a new framework for protecting what the administration terms National Security Systems (NSS) — networks used for military operations, intelligence activities, and the handling of classified information. The White House stated that the United States must be able to conduct military and intelligence operations in 'contested cyber environments' while ensuring government personnel have access to secure technology.

NSA's Expanded Role

The memorandum designates the Director of the NSA as the National Manager for National Security Systems, handing the agency a central mandate to identify cyber threats, set technical standards, and coordinate responses to major cybersecurity incidents. According to the document, the National Manager will be empowered to 'identify emerging threats, advise the CNSS, issue emergency directives, provide authoritative minimum requirements for cryptology and cryptographic systems' and direct technical security measures across government networks.

In cases involving serious cyber threats, the National Manager will have authority to issue emergency directives requiring agencies to take immediate protective action on sensitive networks.

Committee on National Security Systems Revived

The directive re-establishes the Committee on National Security Systems (CNSS), an interagency body tasked with coordinating cybersecurity policy across defence, intelligence, and civilian agencies that operate national security networks. Agencies operating such systems will be required to comply with cybersecurity directives issued by the CNSS, which will also establish baseline security requirements and oversee government-wide implementation.

The document authorises the CNSS to direct agencies to take specific actions when facing a known or suspected cyber threat, vulnerability, or risk. National Security Systems must meet or exceed cybersecurity standards issued by the National Institute of Standards and Technology (NIST), unless alternative standards are approved by the committee.

What the Memorandum Replaces

The new policy supersedes two earlier presidential directives — a 1990 national security directive and a 2022 memorandum on cybersecurity for defence and intelligence systems. The replacement signals a deliberate effort to modernise a framework that critics had long argued was outdated against the pace of contemporary cyber threats.

The NSA will additionally be responsible for assessing the overall cybersecurity posture of National Security Systems across the federal government, evaluating vulnerabilities, providing technical assistance, and coordinating research and development efforts.

Implementation Timeline and New Requirements

The memorandum sets a structured series of deadlines. The CNSS must update its governing procedures within 30 days, issue a cybersecurity roadmap within 60 days, and review existing cybersecurity policies within 90 days. Agencies will also be required to maintain annual inventories of all National Security Systems under their control.

The order further directs federal agencies to strengthen incident reporting procedures and develop more secure cloud computing standards for sensitive government operations. This comes amid a broader US push to harden federal cyber defences following a series of high-profile breaches attributed to foreign adversaries targeting government networks, defence systems, and critical infrastructure.

Broader Context

Cybersecurity has become a growing pillar of US national security policy as officials warn of increasingly sophisticated operations by foreign state actors. In recent years, Washington has moved to shore up cyber defences after notable intrusions exposed vulnerabilities in sensitive federal systems. The Trump administration's memorandum represents the most significant structural overhaul of national security cyber governance in over two decades, consolidating authority under the NSA while creating new accountability mechanisms across agencies.

How swiftly agencies comply with the new directives — and whether the CNSS can function as an effective cross-agency coordinator — will be closely watched by defence analysts and cybersecurity professionals in the months ahead.