Insights & Research

Blog

Better Identity at Five Years: An Updated Policy Blueprint and Report Card

The last five years has seen America make mixed progress on digital identity – in some cases embracing recommendations and moving forward – and in others stalled and rudderless in efforts to counter criminals and hostile nation states.

Proposed FAR Rule on Data Localization Would Undermine U.S. Cybersecurity, Competitiveness

The newly proposed Federal Acquisition Regulation would advocate for data localization to the detriment of the U.S. Government’s mission, overall cybersecurity, and impact innovation.

Cybersecurity Predictions for 2024

The Center for Cybersecurity Policy & Law staff offer their predictions on what's to come in 2024 and the season finale of the Distilling Cyber Policy podcast offers some additional commentary on what's ahead.

Coalition Submits Comments to CISA on Software Attestation Form

The Cybersecurity Coalition submitted comments to CISA's second Request for Comment on its Secure Software Development Attestation Common Form.

The Path to Banning Ransomware Payments

For years there have been discussion around banning ransomware payments, but these have been too extreme. Now is the time for a reasonable scenario to ban payments.

Episode 10: Kemba Walden - Reflections of an Acting National Cyber Director

Former U.S. National Cyber Director Kemba Walden joins Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law on the latest episode of the Distilling Cyber Policy podcast.

Most Promising Development of 2023: Government Focus on Cyber Policy

The most positive cybersecurity development of 2023? The focus and engagement of government policymakers spanning the globe.

Open Source Software Security Should Focus on Adoption of Memory Safe Programming Languages

The Cybersecurity Coalition’s comments in response to the Office of the National Cyber Director Request for Information on Open-Source Software Security focuses on the adoption of memory safe programming languages.

Striking a Balance: Preserving SEC’s Cyber Rules Amid Incident Reporting Backlash

New cybersecurity rules from the SEC will take effect this month and intend to enhance and standardize disclosures regarding cybersecurity. However, pushback on incident reporting requirements are eclipsing other important components of the rule.

Unraveling the Impact of USTR’s WTO Reversal on Cybersecurity and Global Trade

The Office of the United States Trade Representative to remove its support for policies in the World Trade Organization E-commerce Joint Statement Initiative around cross border data flows is in opposition to other U.S. positions.