An important read by Chris Inglis the White House National Cyber Director.

← Back to Blog

An important read by Chris Inglis the White House National Cyber Director. As with Kinetic warfare highlighting the need to balance both ‘offensive’ and ‘defensive’ capabilities.

Chris Inglis pointed out (sic) The only reasonable solution is to get serious about defense; to make defense the new offense, such that if youre an adversary in this space, youve got to beat all of us to beat one of us,” he said. That requires an investment upfront on resilience, robustness, not just in data and systems, but in roles and responsibilities. Thats how you defend collaboration, and confidence too, so that you need to make sure that everyone in the system understands what role they play in the defense of that system, so that everyone can participate in their own defense.” 

We’ve said for a long time that the successful approach to cyber security is to balance both offensive and defensive cyber capabilities. However Kinetic warfare society relies upon nation states to provide the offensive and defensive capabilities. Capabilities that nation states deliver for offensive cyber (many nation states have their own capabilities and proxies). Nation states cannot practically provide defensive cyber for all, as defensive cyber is an organisation specific activity and there are millions of organisations that require protection.

Defensive cyber requires nations to focus on the tools to protect their critical infrastructure, organisations and members of society from cyber attack. That can only be achieved by requiring organisations to focus on their cyber resilience, that of their supply chains, educating citizens on cyber security and providing appropriate training programs.

Cybersecurity has been put under the regulatory spot light starting in 2021 and into 2022. Recent regulatory announcements in the U.S, EU and APAC are moving cyber security ‘left of bang’ towards regulatory compliance and enforcement. Whereby cybersecurity defense is being enacted by regulators for the protection of critical infrastructure and industry. Whether or not you believe in the ‘carrot’ or the ‘stick’ defensive cyber regulation through cybersecurity risk management is being proposed. But governments can help by providing appropriate incentives, education programs and funding to enable defensive cyber and corporate resilience.

Thoughts Ted Dziekanowski

#cybersecurity #cyberregulation #defensivecyber #cyberregulation #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6964866751939362816