Distilling Cyber Policy

In the latest Distilling Cyber Policy podcast, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Irfan Hamani, Deputy Director for UK Cybersecurity and Resilience Policy at the UK Department for Science, Innovation and Technology (DSIT).

As cyber regulations continue to evolve around the world, organizations increasingly face the challenge of navigating a fragmented regulatory landscape. Irfan discusses the importance of international cyber regulatory alignment, the benefits of developing common cybersecurity standards and terminology, and the role collaboration plays in strengthening global cyber resilience. The conversation explores how governments, industry, and international organizations can work together to address emerging cyber risks. 

Irfan also shares insights into the UK's approach to cyber resilience, including cyber insurance, legal frameworks, and industry engagement, while highlighting the value of international forums such as Wilton Park and the OECD in fostering cooperation and advancing cybersecurity policy.

News: 

• U.S. Government Imposes Export Controls on Anthropic’s Fable 5, Citing National Security Concerns
• Australia’s Horizon 2 Action Plan
• New Plans to Sharing, Taking, or Viewing Nude Images
• UK Kings Honours List Nomination

Interview:

• NIST Cybersecurity Framework
• UK Cyber Security and Resilience Bill
• OECD Cybersecurity Initiatives
• ETSI 303 645 - Cybersecurity Standard on Consumer IoT Devices

In the latest Distilling Cyber Policy podcast, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Bart Groothuis, Member of the European Parliament and a leading voice on EU cybersecurity policy. 

This episode features an in-depth discussion on AI security, cyber policy, and the evolving landscape of cybersecurity, featuring experts from the EU and industry leaders. Topics include Project Glasswing, EU cybersecurity legislation, quantum computing, and the dark economy of hacking.

Interview:

• European Cybersecurity Act 2.0

News:

• Anthropic’s Mythos 
• UK Tracking Russian Submarines over its Subsea Cables

Community Corner:

• US version: "Dark Screens: Hackers and Heroes in the Shadowy World of Ransomware"(release date 28 April)
• UK version: "We Know You Can Pay A Million: Inside the Dark Economy of Hacking and Ransomware" (release date 2nd April)

In this year-end episode of Distilling Cyber Policy, hosts Alex Botting and Jen Ellis are joined by three CCPL experts to try and predict the future of cyber policy in the coming year, while reflecting on some of their predictions from last year. Our experts include Caitlin Clarke, Jeremy Grant, and Heather West as well as thoughts from prior guests such as MEP Bart Groothius, Ifran Hemani, and Katharina Sommers.

In the latest Distilling Cyber Policy podcast, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by guests, Stacy O’Mara, Senior Director of Venable and Leonard Bailey, former Head of the Cybersecurity Unit in the Computer Crime and Intellectual Property Section (CCIPS) and Special Counsel for National Security in the DOJ’s Criminal Division.

From shifting global norms to the rising pressure for stronger deterrence, our guests break down why offensive capabilities are back in the spotlight and what it means for national security. They dig into the debate over whether these operations should remain strictly government-run or if there’s ever a world where the private sector plays a significant role. They also break down the risks, the misconceptions, and the practical challenges that keep the “hack back” debate alive, including concerns about misattribution, escalation, and potential interference with intelligence or law enforcement operations.

Interview:

• Pall Mall Process Industry Code of Practice (due Dec. 22)
• Computer Fraud and Abuse Act (CFAA)

News:

• India Orders Smartphones Makers to Preload State-Owned Cyber Safety App
• CISA, Australia, and Part and Partners Author Joint Guidance on Securely Integrating Artificial Intelligence in Operational Technology

Community Corner:

• Carveout for Security Research in Portugal's NIS2

For our last Distilling Cyber Policy podcast episode of 2024, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by four CCPL experts to try and predict the future of cyber policy in the coming year, while reflecting on some of their predictions from last year. Our experts include Ari Schwartz, Jeremy Grant, Heather West, and Harley Geiger, as well as thoughts from prior guests such as Ambassador Brendan Dowling and Shehzad Charania. 

Instead of the news segment this week, Jen and Alex share details on the upcoming CyberNext DC conference, co-hosted by CCPL and the Cyber Threat Alliance, which is taking place this Dec. 12. You can register for virtual attendance here.

In the latest Distilling Cyber Policy podcast, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are re-joined by guests from earlier this season: Lee Licata, Deputy Section Chief for National Security Data Risk at the Department of Justice (DOJ), and Grant Dasher, the Acting Technical Deputy Director for Cybersecurity at the Cybersecurity and Infrastructure Agency (CISA).

Both came on to discuss the then-recently released Executive Order 14117 and the associated Advanced Notice of Proposed Rulemaking (ANPRM). Since then, the DOJ issued a Notice of Proposed Rulemaking (NPRM), with written comments from the public due by November 29, 2024. Additionally, as directed by the EO, CISA has developed proposed security requirements to apply to classes of restricted transactions identified in the NPRM. In the episode, Lee and Grant dig into the proposed rule and security requirements, as well as the next steps in the rule making process.

Interview:

• Executive Order 14117
• DOJ Notice of Proposed Rulemaking (NPRM)
• CISA Proposed Security Requirements  

News:

•  Streamlining Federal Cybersecurity Regulations Act (Senate); Streamlining Federal Cybersecurity Regulations Act (House) 
• Pall Mall Process Meeting
• IST's 2nd Annual Cyber Policy Awards, open for submissions through December 6th

Community Corner:

• Citizen Lab Report - Rivers of Phish, Sophisticated Phishing Targets Russia’s Perceived Enemies Around the Globe
  
  

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Anne Marie Schumann, the Department of the Navy’s Principal Cyber Advisor. In this role, she is responsible for advising the Secretary of the Navy, Chief of Naval Operations, and Commandant of the Marine Corps on all cyber matters. In the discussion, Anne Marie shares context on the Navy’s first-ever Department Cyber Strategy, which was released in November 2023. 

News:

• CISA's Call for Comment on Cyber Incident Reporting Form

Community Corner:

• Paris Peace Summit

As always, if you would like to submit something for the Community Corner segment, or have topic ideas for upcoming episodes, please email [email protected]. 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Hamish Hansford, the Deputy Secretary of Cyber and Infrastructure Security Group at the Australian Department of Home Affairs. The discussion begins with the fourth annual convening of the International Counter Ransomware Initiative (CRI), as well as several other cyber priorities for Australia.

News:

• The Pall Mall Process 
• The official adoption of the EU’s  Cyber Resilience Act (CRA)
• The publication of the EU’s Network and Information Security Directive (NIS 2) Implementing Act
• Ghana’s New National Cybersecurity Policy and Strategy 

Community Corner:

• “Software Supply Chain Security: Securing the End-to-End Supply Chain for Software, Firmware, and Hardware” by Cassie Crossely 

As always, if you would like to join us for the community corner segment, or have topic ideas for upcoming episodes, please email [email protected]. 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Paula Bogantes, the Costa Rican Minister of Science, Innovation, Technology and Telecommunications.

News:

• Senate Confirms Michael Sulmeyer as DoD Cyber Policy Chief
• DoD Establishes the Office of the Assistant Secretary of Defense for Cyber Policy
• Chile’s Public Consultation on Cybersecurity Framework Law Regulations
• Chile’s New Cybersecurity Framework Law
• EU Product Liability Directive

Interview:

• Costa Rica's 2023-2027 Cybersecurity Strategy 
• United States Announces $25M to Strengthen Costa Rica’s Cybersecurity
• DigiAmericas LATAM CISO Summit 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Grant Schneider, Senior Director of Cybersecurity Services at Venable LLP.  Grant’s discussion with Alex and Jen delves into the National Defense Authorization Act (NDAA) and its implications for cybersecurity policy. 

News:

• Chevron Pattern Disrupted: The Impact on Cybersecurity Regulations
• Polish Parliament Investigation Into Spyware Progresses
• Pall Mall Process
• European Commission Consultation on NIS2 Implementing Regulation 

Interview:

• National Defense Authorization Act 
• Assessing an Independent Cyber Force
• FISMA Amendment 

Community Corner

• Policy @ DEF CON programming