In our latest episode, former U.S. National Cyber Director Kemba Walden joins Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law. The discussion includes Kemba’s reflections on her time at the Office of the National Cyber Director, and the multitude of major policy initiatives that she spearheaded - including the release of the updated U.S. National Cybersecurity Strategy, the associated Implementation Plan, the Cybersecurity Priorities for the Fiscal Year 2025 Budget, and the U.S. National Cyber Workforce and Education Strategy -  and all in just ten months of tenure. 

Kemba reflected upon:

  • Receiving the call from President Biden while at Munich Security Conference
  • Her experiences working with international partners
  • The development and rollout of the U.S. National Cyber Strategy
  • What's next for implementation of the Strategy

In addition, Alex discusses the Cyber Resilience Act (CRA) news with a short recap of the political agreement reached between the European Commission, Council and Parliament around the proposed legislation. In terms of timing, the CRA will come into force over a phased transition period starting in late 2025. He also touches on the newly-released Australian Cyber Security Strategy and how it builds on the cyber policy efforts of the Five Eyes community. Finally, our Mystery Trivia Master this week is the information security wizard, Casey Ellis. 

Check out the newest Distilling Cyber Policy episode on Spotify, Apple or Google. As always, if you would like to submit cyber policy trivia, or have topic ideas for upcoming episodes, please email iaj01@venable.com.

Read Next

UNGA Takeaways: Digital Sovereignty Without Digital Isolation

A central theme emerged across the conversation: greater digital sovereignty does not have to mean greater digital isolation.

Whitepaper on Coordinating Vulnerability Response in the Age of AI

The report highlights that open-source software faces particularly acute coordination challenges due to fragmented ownership and limited maintainer resources, compared to the more centralized response model in proprietary software.

Event Recap: LATAM CISO Summit 2026 Brings Together Cybersecurity Leaders from Across the Americas

The 2026 Summit demonstrated both the scale of the cybersecurity challenges facing the Americas and the growing willingness of leaders across the region to address them collaboratively.