In our latest episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law sat down with Josh Corman, co-founder of I Am The Cavalry, to learn more about the movement. In the decade since its inception, the Cavalry has had a significant impact on the development of cybersecurity policy. These include passage of the Protecting and Transforming Cyber Healthcare Act (PATCH), which provided the U.S. Food and Drug Administration (FDA) with the authority to establish medical device security requirements for manufacturers, as well as the passing of the Internet-of-Things (IoT) Cybersecurity Improvement Act, the first U.S. federal law regulating the security of IoT devices. 

The discussion with Josh delves into specific examples of the value of collaboration between policy makers and security experts, the role of the greater community in increasing cyber safety, and how listeners can get involved. In addition to the above, this week’s episode features recent cyber policy developments from Japan, the U.K., and Bangladesh, as well as some tricky cryptography trivia. 

Check out the newest Distilling Cyber Policy episode on Spotify, Apple or Google. If you would like to submit cyber policy trivia for upcoming episodes, please email info@centerforcybersecuritypolicy.org

‍

Read Next

Whitepaper on Coordinating Vulnerability Response in the Age of AI

The report highlights that open-source software faces particularly acute coordination challenges due to fragmented ownership and limited maintainer resources, compared to the more centralized response model in proprietary software.

Five Lessons from a Cross-Border Drone Attack Exercise

A tabletop exercise in Detroit underscores the national security risks to critical infrastructure and public spaces associated with drone attacks.

Beyond Buzzwords: What Public Views on Scanning and Encryption Mean for Policymakers

Public support for content scanning and encryption backdoors drops when tradeoffs are made clear. This survey of Nordic countries shows people prioritize privacy and security over harm detection, and lack trust in institutions to govern access.