Editor’s Note: Cost-benefit analysis for cybersecurity is an essential prerequisite for developing an effective cybersecurity regulatory program. For more information on the need for the federal government to develop such cost-benefit analysis tools, please see CRE’s Statement to the Information Security and Privacy Advisory Board (ISPAB) available here.
From: Forbes
Most businesses have paid little attention to the sweeping cybersecurity legislation introduced on Valentine’s Day by Senators Lieberman, Collins, Rockefeller, and Feinstein, even though it could be one of the most expensive and intrusive pieces of legislation proposed since Sarbanes-Oxley. Intended to help protect the nation against a major cyber attack by improving the security and resiliency of the computer systems of critical infrastructure companies, the Cybersecurity Act of 2012 (S. 2105) actually would put a federal agent inside most of these businesses’ data centers and require assessments and reporting that could make Sarbanes-Oxley seem inexpensive.