The order sets out provisions for sharing critical threat information from government to the private sector, but potentially establishes a foundation for later bidirectional sharing of sensitive information. Its vague categorization of what constitutes critical infrastructure limits transparency on threat reduction, and may hinder confidence building measures intended to mitigate cyber conflict. It offers some civil liberties protections, but doesn’t go far enough.…