For our last Distilling Cyber Policy podcast episode of 2024, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by four CCPL experts to try and predict the future of cyber policy in the coming year, while reflecting on some of their predictions from last year. Our experts include Ari Schwartz, Jeremy Grant, Heather West, and Harley Geiger, as well as thoughts from prior guests such as Ambassador Brendan Dowling and Shehzad Charania. 

Instead of the news segment this week, Jen and Alex share details on the upcoming CyberNext DC conference, co-hosted by CCPL and the Cyber Threat Alliance, which is taking place this Dec. 12. You can register for virtual attendance here.

In the latest Distilling Cyber Policy podcast, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are re-joined by guests from earlier this season: Lee Licata, Deputy Section Chief for National Security Data Risk at the Department of Justice (DOJ), and Grant Dasher, the Acting Technical Deputy Director for Cybersecurity at the Cybersecurity and Infrastructure Agency (CISA).

Both came on to discuss the then-recently released Executive Order 14117 and the associated Advanced Notice of Proposed Rulemaking (ANPRM). Since then, the DOJ issued a Notice of Proposed Rulemaking (NPRM), with written comments from the public due by November 29, 2024. Additionally, as directed by the EO, CISA has developed proposed security requirements to apply to classes of restricted transactions identified in the NPRM. In the episode, Lee and Grant dig into the proposed rule and security requirements, as well as the next steps in the rule making process.

Interview:

• Executive Order 14117
• DOJ Notice of Proposed Rulemaking (NPRM)
• CISA Proposed Security Requirements  

News:

•  Streamlining Federal Cybersecurity Regulations Act (Senate); Streamlining Federal Cybersecurity Regulations Act (House) 
• Pall Mall Process Meeting
• IST's 2nd Annual Cyber Policy Awards, open for submissions through December 6th

Community Corner:

• Citizen Lab Report - Rivers of Phish, Sophisticated Phishing Targets Russia’s Perceived Enemies Around the Globe
  
  

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Anne Marie Schumann, the Department of the Navy’s Principal Cyber Advisor. In this role, she is responsible for advising the Secretary of the Navy, Chief of Naval Operations, and Commandant of the Marine Corps on all cyber matters. In the discussion, Anne Marie shares context on the Navy’s first-ever Department Cyber Strategy, which was released in November 2023. 

News:

• CISA's Call for Comment on Cyber Incident Reporting Form

Community Corner:

• Paris Peace Summit

As always, if you would like to submit something for the Community Corner segment, or have topic ideas for upcoming episodes, please email [email protected]. 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Hamish Hansford, the Deputy Secretary of Cyber and Infrastructure Security Group at the Australian Department of Home Affairs. The discussion begins with the fourth annual convening of the International Counter Ransomware Initiative (CRI), as well as several other cyber priorities for Australia.

News:

• The Pall Mall Process 
• The official adoption of the EU’s  Cyber Resilience Act (CRA)
• The publication of the EU’s Network and Information Security Directive (NIS 2) Implementing Act
• Ghana’s New National Cybersecurity Policy and Strategy 

Community Corner:

• “Software Supply Chain Security: Securing the End-to-End Supply Chain for Software, Firmware, and Hardware” by Cassie Crossely 

As always, if you would like to join us for the community corner segment, or have topic ideas for upcoming episodes, please email [email protected]. 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Paula Bogantes, the Costa Rican Minister of Science, Innovation, Technology and Telecommunications.

News:

• Senate Confirms Michael Sulmeyer as DoD Cyber Policy Chief
• DoD Establishes the Office of the Assistant Secretary of Defense for Cyber Policy
• Chile’s Public Consultation on Cybersecurity Framework Law Regulations
• Chile’s New Cybersecurity Framework Law
• EU Product Liability Directive

Interview:

• Costa Rica's 2023-2027 Cybersecurity Strategy 
• United States Announces $25M to Strengthen Costa Rica’s Cybersecurity
• DigiAmericas LATAM CISO Summit 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Grant Schneider, Senior Director of Cybersecurity Services at Venable LLP.  Grant’s discussion with Alex and Jen delves into the National Defense Authorization Act (NDAA) and its implications for cybersecurity policy. 

News:

• Chevron Pattern Disrupted: The Impact on Cybersecurity Regulations
• Polish Parliament Investigation Into Spyware Progresses
• Pall Mall Process
• European Commission Consultation on NIS2 Implementing Regulation 

Interview:

• National Defense Authorization Act 
• Assessing an Independent Cyber Force
• FISMA Amendment 

Community Corner

• Policy @ DEF CON programming

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Despina Spanou, the Head of the Cabinet of the Vice-President of the European Commission. The discussion begins with the recent history and intentions of EU technology policy making, the EU’s legislative process, and the development of the Cyber Resilience Act (CRA). The conversation concludes with a look towards international cooperation on cybersecurity, including the recent announcement of the US-EU Joint Cybersafe Products Action Plan and the outcomes of the latest U.S-EU Trade and Technology Council meeting. 

News:

• ONCD Releases its Summary of the 2023 Cybersecurity Regulatory Harmonization RFI
• White House highlights voluntary commitments from Google, Microsoft to provide cyber services for health sector

Interview:

• Digital Covid Certificate
• NIS Directive
• CRA
• U.S.-EU Sign Joint Cybersafe Products Action Plan
• U.S.-EU Trade and Technology Council Meeting

Community Corner:

• ICS Village
• Hack the Capitol

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by John Banghart, Senior Director at Venable LLP, and Kent Landfield, a founding member of the Common Vulnerabilities and Exposures (CVE) Program and bonafide cybersecurity industry veteran. Their discussion delves into the latest developments and ongoing debate around the National Vulnerability Database (NVD).

News:

• International Cyberspace and Digital Policy Strategy
• CISA's Secure by Design Pledge
• UK's Product Security and Telecommunications Infrastructure (PSTI) Act
• UK Consultation for draft code of practice for software vendors
• UK Consultation for draft code of practice for cybersecurity of AI  

Interview:

• National Vulnerability Database
• Common Vulnerability Exposures
• Forum of Incident Response and Security Teams (FIRST)

Community Corner:

• Inaugural Cyber Policy Awards

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Lee Licata, one of the Deputy Chiefs of the Foreign Investment Review Section in the National Security Division at the Department of Justice (DOJ), and Grant Dasher, the Cybersecurity Division Architecture Branch Chief at the Cybersecurity and Infrastructure Agency (CISA). The conversation delves into the recently released Executive Order (EO) 14117 on "Preventing Access to Americans' Bulk Sensitive Data and United States Government-Related Data by Countries of Concern." 

In addition, this week, Alex and Jen are joined by Michael Daniel, president and CEO of the Cyber Threat Alliance, to discuss the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). As always, if you would like to submit cyber policy trivia, or have topic ideas for upcoming episodes, please email [email protected].

News:

• Notice of Proposed Rule Making to Implement the Cyber Incident 
• Reporting for Critical Infrastructure Act (CIRCIA) of 2022 
• The Ransomware Task Force (RTF) celebrated its third anniversary with a one day event co-hosted by the Center for Cybersecurity Policy and Law, and you can watch the recording here. 
• CR2’s Guarding Global Commerce Report 

Interview:

• EO 14117 on "Preventing Access to Americans' Bulk Sensitive Data and United States Government-Related Data by Countries of Concern"
• EO 14117 Advanced Notice of Proposed Rule Making
• ICT Supply Chain, Department of Commerce 

In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Shehzad Charania MBE, Director of Legal Affairs and International Relations at the UK’s Government Communications Headquarters (GCHQ).

The jam-packed discussion delves into the importance of workforce diversity, the notion of responsible cyber power, and the commercial proliferation of offensive cyber weapons like spyware. In addition, this week’s episode features cyber policy recommendations from the Cybersecurity Coalition’s EU Policy Roadmap 2024 - 2029. Our Mystery Trivia Master is the wonderful Liz Wharton (@lawyerliz), founder and CEO of Silver Key Strategies. 

News:

• Cybersecurity Coalition EU Policy Roadmap 2024 - 2029

Interview:

• UK National Cyber Force Paper on Responsible Cyber Power
• Australian Cyber Policy with Ambassador Brendan Dowling
• UK's 2022 Cybersecurity Strategy
• African Union Position on the Application of International Law in Cyberspace
• Pall Mall Process Declaration 
• Summit for Democracy Joint Statement

Trivia:

• Air-Control Hacker Faces Charges (Wired, 1998)