ADVANCED TECH CAN HELP IMPROVE CYBER REGULATIONS NOW

Several reports this past weekend highlighted the Trump Administration’s plans to use AI to substantially reduce as many as 100,000 federal regulations. While the target date for that broader project points to 2026, and could face legal challenges, the OMB can already take substantial steps to use advanced technology to vastly improve cybersecurity regulations which […]

TRUMP AI REG PLAN CAN WORK NOW ON CYBER SECURITY

Last week the Washinton Post reported on Administration’s plans to access Artificial Intelligence (AI) tools to identify opportunities for broad-based deregulation. While that broader program is not slated to launch until next year, AI tools are already available which demonstrate that eliminating redundant cybersecurity regulations would generate billions of dollars in government savings, tens of […]

CONGRESS MUST REAUTHORIZE CISA 2015

The Cybersecurity Information Sharing Act (CISA) of 2015 is arguably the most successful cybersecurity legislation ever enacted. It uses market incentives (liability protection) to incentivize critical information sharing between industry and the government. It is currently scheduled to expire in three months. Disabling our most fundamental cybersecurity mechanism would take place at a time of […]

THOUGHTS FROM THE WORLD ECONOMIC FORUM – REIMAGINING CYBER REGULATIONS

Last week, I was honored to be asked to lead the session on reimagining cyber regulations at the World Economic Forum event in Paris. The Forum relies on the Chatham House Rule, so I will await their report on the meeting; however, below is the text from which I drew the opening statement for the […]

UPCOMING ISA EVENT – CISA 2015 REAUTHORIZATION BRIEFING

6/25 ISA EVENT: IT SECTOR COORDINATING COUNCIL TO BRIEF CONGRESS ON CISA 2015 REAUTHORIZATION JOIN US! On June 25 in Cannon 401, the IT Sector Coordinating Council will hold a briefing on the need to reauthorize the 2015 Cybersecurity Information Sharing Act (CISA – the law not the agency). The briefing will begin at noon and end […]

WHY HARMONIZING CYBER REGULATION WON’T WORK – AND WHAT WILL

WHY CYBER REGULATORY HARMONIZATION WON’T WORK The core reason cybersecurity regulatory harmonization won’t work is that it doesn’t promise to improve the effectiveness of our regulations. Harmonization should not be understood as the goal of our efforts to improve our cybersecurity regulatory system. Our goal must be effectiveness, i.e., to actually improve our cybersecurity. Unless […]

PART III THE FASTEST (AND CHEAPEST) WAY TO IMPROVE CYBERSECURITY: REFORM REGULATION

A ONCE IN A LIFETIME OPPORTUNITY TO GET GOVERNMENT RIGHT ON CYBERSECURITY PART III THE FASTEST (AND CHEAPEST) WAY TO IMPROVE CYBERSECUITY: REFORM REGULATION This Congress could enact two, comparatively simple, administrative changes that would generate the biggest improvement in US cybersecurity in legislative history, and both cost virtually nothing. This week the House Homeland […]

INTEREST GROWING IN ISA PROPOSAL TO ELIMINATE CYBER REGULATORY REDUNDANCIES

Earlier this week ISA posted the attached blog arguing that significant reforms in cybersecurity policy are required to better protect our nation, including eliminating the significant redundancy in cyber regulations which is wasting vast amounts of limited cyber resources. We further argued that on this one specific topic the overall government reform of the new […]

INTERNET SECURITY ALLIANCE STATEMENT OF SUPPORT FOR THE PIVOTT ACT

The Internet Security Alliance (ISA) strongly supports Chairman Mark Green’s Cyber PIVOTT Act which is headed to markup tomorrow. Sens. Mike Rounds (R-SD) and Gary Peters (D-MI) introduced the bipartisan companion legislation in the Senate. The bill received bipartisan support in the House when it advanced out of Committee in the 118th Congress.   If enacted, this bill […]