Twenty-five years after the September 11 attacks killed nearly 3,000 people, the questions they raised about U.S. security remain unresolved. The 9/11 Commission's report, a bestseller at the time, detailed how failures in imagination, management, capability, and policy left the nation vulnerable. That system, designed for Cold War-era threats—tanks, fighter jets, and conventional armies—was ill-prepared for a foe using truck bombs, cave training, and asymmetric tactics.
Al Qaeda had been probing U.S. defenses throughout the 1990s, striking embassies in Africa, attacking the USS Cole, and even plotting to bring down a New York skyscraper. Yet Washington's institutions and policies were slow to adapt, leaving aging and vulnerable defenses exposed to a dynamic adversary.
Tim Roemer, who served on the bipartisan 9/11 Commission led by Republican Tom Kean and Democrat Lee Hamilton, recalls the daunting task of crafting recommendations amid a polarized Congress and a frightened public. The commission, created with the help of Sen. John McCain, faced tight deadlines and budget limits. But with the relentless advocacy of 9/11 family members, the panel produced more than three dozen major proposals.
Those recommendations led to the creation of the Director of National Intelligence to coordinate 17 agencies, a National Counterterrorism Center to break down information silos, and the REAL ID program to tighten state-issued identification. Aviation security was overhauled, expanding the No-Fly List from a mere 16 names before 9/11 to thousands today, with TSA officers now a key line of defense.
Congress passed the Intelligence Reform and Terrorism Prevention Act of 2004, signed by President George W. Bush, thanks to bipartisan efforts from Sens. McCain, Susan Collins, Joe Lieberman, and House Democratic Leader Nancy Pelosi. The new architecture has held—no major attack on U.S. soil since—but Roemer warns that a crucial recommendation was never implemented: reforming congressional oversight. With 92 committees and subcommittees claiming jurisdiction over homeland security, responsibility is diffuse, and accountability suffers.
Today's threat landscape has shifted to the digital domain. Cyberattacks on water systems, electrical grids, and critical infrastructure are on the rise, with Iran, China, and Russia identified as likely culprits. The Cybersecurity and Infrastructure Security Agency, created in 2019, is understaffed and lacks a confirmed director, leaving the nation's digital underbelly exposed. As Roemer notes, if 9/11 targeted airports, today's soft spots are our networks.
The question that haunted the 9/11 Commission remains: How do we anticipate the next threat before it strikes? The government missed warning signs before 2001, and Roemer argues that the post-9/11 system may again be outdated. He calls for a fresh review, similar to the post-9/11 paradigm shift, to address modern challenges. The stakes are high, as election security threats and global disruptions compound the pressure on an already strained system.
Roemer's warning is clear: without updating the security framework, the United States risks repeating the mistakes of the past. The lessons of 9/11 demand vigilance, but also adaptability—a lesson that applies as much to cyber defenses as to physical ones.
