Distilling Cyber Policy

In our latest episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by former U.S. Congressman Jim Langevin. Jim spent more than 22 years representing Rhode Island’s 2nd Congressional District in the U.S. House of Representatives. The discussion focuses on his enormous influence the development of U.S. congressional cyber policy.

News Section:

• Clorox Cyberattack Brings Early Test of New SEC Cyber Rules
• Australia to ‘Build Six Cyber Shields’
• International Criminal Court Will Now Prosecute Cyberwar Crimes
• International Criminal Court Hack 

Interview Section:

• Cyberspace Solarium Commission Report
• Longtime Congressman James Langevin to serve as senior fellow at Brown’s Watson Institute
• Former Congressman James Langevin to serve as visiting scholar at URI
• Elissa Slotkin to co-chair Congressional Cybersecurity Caucus 
• ‘Cyber risk is business risk, and the SEC knows it’, Chris Inglis, Jim Langevin & Mark Montgomery

Trivia Section:

• NIST Cybersecurity Framework
• CR2 and NIST workshop: “A Cyber Framework Fit for Global Use: Cybersecurity Framework (CSF) 2.0”

In our latest episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Mieke Eoyang, the Deputy Assistant Secretary of Defense for Cyber Policy. As the highest ranking civilian at the U.S. Department of Defense (DoD), tasked with thinking exclusively about cyber policy, Ms. Eoyang was able to provide valuable insights around the recently released unclassified 2023 DoD Cyber Strategy summary. 

News Section:

• Microsoft’s post on the UN Cybercrime Treaty
• UK’s review of the Investigatory Powers Act
• CISA appoints Mudge
• CISA’s VDP Platform Report 

Interview Section:

• 2023 DoD Cyber Strategy 
• DASD Mieke Eoyang at DEF CON
• Employment Opportunities at DoD
• The Subversive Trilemma: Why Cyber Operations Fall Short of Expectations

Trivia Section:

• ENISA’s Certification Schemes 

In this episode of Distilling Cyber Policy, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law sat down with Joshua Corman, co-founder of I Am The Cavalry, to learn more about the movement and its significant impact on the development of cybersecurity policy.  In addition to the above, this week’s episode features recent cyber policy developments from Japan, the U.K., and Bangladesh, as well as some tricky cryptography trivia.

News Section:

• Chinese military hackers penetrated Japan’s most sensitive computer networks
• Police Service of Northern Ireland (PSNI) Breaches
• Norfolk and Suffolk police: Victims and witnesses hit by data breach
• Bangladesh proposes a new Cybersecurity Law

Interview Section:

• I Am The Cavalry Site
• Original Cavalry Launch video "The Cavalry Isn't Coming…
• 10 Years Later Keynote "And together we crossed the river.. "
• Cavalry Track Day 1
• Cavalry Track Day 2

Trivia Section:

• Skipjack

In this episode of Distilling Cyber Policy, hosts Alex Botting and Jen Ellis dive into the world of hacker conferences with guests Beau Woods and Harley Geiger. The discussion focuses on the importance of collaboration between the policy and security communities at these events, and the unique policy learning opportunities at the upcoming DEF CON, the world’s biggest hacker conference. 

News:

• Kenya Experiences Major Cyber Attack
• SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies
• DNI Haines Statement on the President’s Intent to Nominate Harry Coker Jr. as the National Cyber Director

Interview:

• Beau Woods
• Harley Geiger
• Hacking Policy Council
• The Hackers, the Lawyers, and the Defense Fund - Harley's Presentation at DEF CON
• Policy @ DEF CON
• AI Village @ DEF CON 31
• Hacker Summer Camp Party List

Trivia: 

• EFF Tech Trivia @ DEF CON 31
• Investigation Into Encrypted Phone Network Leads to 6,500 Arrests

If you have a trivia question for Jen and Alex, email it to [email protected]!

In this episode of Distilling Cyber Policy, hosts Alex Botting and Jen Ellis engage in a riveting conversation with Kaja Ciglic, Senior Director of Digital Diplomacy at Microsoft. The discussion delves into the proposed UN Cybercrime Convention, including its origins and scope, as well as some of the treaty’s most contentious topics. The hosts and Kaja also touch on the role of industry and civil society in shaping cyber policy, emphasizing the importance of diverse voices in these critical conversations.

News:

• National Cyber Strategy Issues Implementation Plan 
• Acting National Cyber Director Withdraws Nomination
• White House IoT Labeling Program
• Evaluation of the European Union Agency for Cybersecurity (ENISA) and the European Cybersecurity Certification Framework

Interview Section:

• UN Cybercrime Convention Draft
• Paris Call
• The Budapest Convention on Cyber Crime

Trivia:

• Intelligence-Driven Incident Response, 2nd Edition by Rebekah Brown, Scott J. Roberts
• PPD-41

In this episode of Distilling Cyber Policy, hosts Alex Botting and Jen Ellis engage in a thought-provoking discussion with cybersecurity expert and Member of European Parliament, Bart Groothuis. The conversation centers around the Cyber Resilience Act (CRA), its implications for cybersecurity globally, and how to address untrustworthy vendors in European networks..

MEP Groothuis, drawing from his experience as Parliament's cybersecurity rapporteur, sheds light on the extensive influence an individual can have in shaping legislation. He emphasizes the importance of understanding the subject matter and leveraging expertise to convince stakeholders, ultimately shaping the language and provisions of the CRA. This insightful perspective highlights the significant role of security professionals in driving meaningful change.

The conversation then delves into the concept of software liability.  Groothuis explains how the legislation provides a framework for legal disputes arising from cybersecurity incidents. He emphasizes the need for clear legislation concerning risky vendors, particularly those associated with countries known for offensive espionage programs.  Groothuis advocates for de-risking practices and the incorporation of non-technical factors when evaluating software for critical infrastructure.

Throughout the episode, Groothuis’ expertise and passion for cybersecurity legislation shine. His calls for stronger measures against risky vendors and his efforts to ensure the protection of critical infrastructure create a compelling narrative. Listeners gain valuable insights into the complex world of cybersecurity legislation and the vital role it plays in securing our digital landscape.

Additional Resources:
Europol press release on EncroChat

Australia’s New National Cyber Coordinator
Google Announces $20M for Cyber Clinics
CRA Proposal

ITRE Amendments:
Amendments 124-404
Amendments 405-546