Cybersecurity is no longer a 'greenfield' for policy development. Much has been done since CSIS’s first report was published in 2008 and the next administration will inherit a work in progress.