Internet Security Alliance Top 25 Highlights of 2020
ISA top 25 ISA highlights for 2020 ISA AND National Association of Corporate Directors (NACD) release third edition of the Cyber Risk handbook for corporate directors Cyber Risk 2020. The books are now officially joint ISA-NACD publications (previously known simply as NACD Handbooks) US Department of Homeland Security and the US Department of Justice both endorse ISA/NACD […]
WILL SOLAR WINDS FINALLY BLOW AWAY THE SIMPLITIC MODEL OF CYBERSECURITY?

Naturally, and appropriately Congress is beginning its review of the attack on SolarWinds software which will possibly be the broadest and most damaging in history. We won’t know the details of the harms for months or years.
CONGRESS DOES TWO THINGS WELL: NOTHING & OVERREACT

The man who founded the organization I work for, the Internet Security Alliance, was Dave McCurdy. Mr. McCurdy was the former Chair of the House Intelligence Committee. Dave was fond of reminding people, “Congress does two things well: Nothing and overreact.”
Lawmakers plan probes into SolarWinds, underscore Solarium benefits; security pros cite need for fundamental shifts
House and Senate cybersecurity leaders already are planning to examine the cause and effects of the SolarWinds hack, and touting new cyber tools supplied by the fiscal 2021 National Defense Authorization Act, while some cybersecurity professionals caution that these are preliminary steps on a long road toward effective risk management. New Senate Homeland Security Chairman […]
Industry cyber leader urges Biden: ‘Show us the money’ on commitment to cybersecurity
President-elect Biden should demonstrate his commitment to improving cybersecurity in the aftermath of SolarWinds by moving to close a “cyber investment gap” in which both U.S. industry and foreign adversaries are vastly outspending the United States government in key areas, according to Larry Clinton, head of the Internet Security Alliance. “With due respect, we might […]
MR. BIDEN: ON CYBERSECURITY — SHOW US THE MONEY

President-elect Joe Biden’s response to the Russian cyber-attack, that could turn out to be the most serious security breach since World War II, was his vow that “I will not stand by idlily in the face of cyber assaults on our country”
SOLAR WINDS PROVES US NEEDS TO RETHINK CYBER POLICY — NDAA NOT ENOUGH

If the dramatic Solar Winds hack of multiple critical US government and key private sector, systems proves anything, it is that we need to substantially rethink our approach to cyber security.
China’s Digital Policy Has Consistently Integrated Economics

If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle.
Guest Blog: Simple Solutions for a Complex Threat

By Scott Algeier, IT-ISAC Executive Director The IT-ISAC is happy to support National Cyber Security Awareness Month once again. For more than 15 years, National Cybersecurity Awareness Month (and before that, National Cybersecurity Awareness Week), has encouraged end users to take appropriate steps to secure their devices. Thanks to this consistent messaging, people have become […]
INNOVATION IN CYBERSECURITY: THE CYBERCRIME STOCK MARKET

The Russian attack on many US government cyber systems reported Sunday in the New York Times is being called on of the most sophisticated attacks we have seen.