Policies should focus on ‘managing,’ not ‘solving’ cybersecurity problems, says NRC

May 06

Public policy can help address U.S. cybersecurity, but it should not be viewed as an issue that can be solved through legislation or regulation. Rather, public policy can help improve cybersecurity management, says a new report from the National Research Council.

“A permanent decisive solution to the problem will not be found in the foreseeable future,” conclude report authors.

The report portrays cybersecurity as a never-ending battle against changing adversaries with evolving techniques. Policies can improve the security posture of individuals and private- and public-sector entities, which will reduce the loss and damage done by cyber intrusions and exploits. Authors also say cybersecurity can be improved by more effectively using cybersecurity information and developing greater expertise in protection and resilience.

Read Complete Article