Call us now:
Thank you for posting Ted Dziekanowski. I wonder if the challenge ahead is more one of setting a baseline for cybersecurity compliance, working and enforcing it. It is clear that the U.S is not the only nation that has struggled with cybersecurity, if the development of cybersecurity regulation is measure of success. The challenges that the National Strategy faces are the same as those that EU cyber regulations face, that is one of detail, delivery and enforcement. While EU Cyber regulations are not short on detail, they are prescribe compliance, placing the onus on covered entities to demonstrate they are managing cybersecurity risk, without setting baseline standards.
The U.S has regulated cyber for Federal Agencies for 20 years through FISMA and OMB A130, with little success. Will the National Cyber Strategy change this this track record? Maybe it will, as the focus of U.S cyber strategy seems to be focused more on the private sector and U.S regulatory enforcement for cyber seems to have moved ahead of regulation. With the DoJ’s civil cyber fraud initiative focusing on regulatory compliance.
The other significant shift has been the recognition that cyber is a national security issue. As the interconnect nature of the public and private sector, our dependance on digital and the effects of cyber hackers affect corporate security, economic prosperity and national security.
I wouldn’t say that the NCS has a fatal flaw, more detail is required and it will be going through growing pains. Growing pains that will be felt, as with EU cyber regulation, by the private sector.
#cybersecurity #cyberriskmanagement #nationalcybersecuritystrategy #eunis2 #dora
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7057607010594250752