Insights & Research

Blog

Striking a Balance: Preserving SEC’s Cyber Rules Amid Incident Reporting Backlash

New cybersecurity rules from the SEC will take effect this month and intend to enhance and standardize disclosures regarding cybersecurity. However, pushback on incident reporting requirements are eclipsing other important components of the rule.

Unraveling the Impact of USTR’s WTO Reversal on Cybersecurity and Global Trade

The Office of the United States Trade Representative to remove its support for policies in the World Trade Organization E-commerce Joint Statement Initiative around cross border data flows is in opposition to other U.S. positions.

NIST CSF 2.0 Includes Positive Changes, Need for Greater Consistency, Practical Guidance

The Cybersecurity Coalition submitted broadly supportive comments in response to the National Institute for Standards and Technology Discussion Draft of the Cybersecurity Framework (CSF) 2.0 Core.

Center for Cybersecurity Policy & Law Staff are Thankful for …

The staff at the Center for Cybersecurity & Law would like to say what they are thankful for this year.

Episode 9: Australian Cyber Policy with Ambassador Brendan Dowling

In the latest episode, Alex and Jen are joined by the Australian Ambassador for Cyber Affairs and Critical Technology, Brendan Dowling on the country's numerous recent cyber policy developments.

Ninth Circuit Avoids Vulnerability Disclosure Precedent, Following Amicus Brief

The Court of Appeals for the Ninth Circuit affirmed the dismissal of all claims in a case that risked setting a precedent requiring premature vulnerability disclosure, In re Intel Corp. CPU Marketing.

Progress Made, Challenges Remain: Bringing Privacy into Enterprise Risk Management

While progress needs to be made when it comes to federal privacy programs, advancements have occurred, and the addition of new tools will further help agencies protect data.

Outcomes from the 2023 Counter Ransomware Initiative

The White House's Counter Ransomware Initiative convened 48 countries, the European Union, and Interpol to discuss combating ransomware.

FCC Proposes Overly Complex IoT Cybersecurity Labeling Program

In comments to the Federal Communication Commission on the proposed IoT labeling program, the Cybersecurity Coalition raised concerns that the agency envisioned a labeling system that was overly complex, costly, and untested.

(Digital) Identity Crisis: The Need for a National Digital Identity Strategy in the U.S.

If you look at every peer country to the U.S. there is either a robust digital identity program in place or a national initiative under way. But the U.S. is an outlier and needs to prioritize these efforts to protect citizens and stop fraud.