The directive was the outcome of a thorough review lasting several months by the Biden administration concerning cyber intrusions by both criminals and foreign states over the last four years.