The White House released a cybersecurity strategy document for the National Cybersecurity Initiative, and it’s making the rounds within the industry.
Some are welcoming it as a ‘good starting point’ but others point out that few aspects of the document are actionable.
Who is the target audience for this document? Should CISO’s be taking note? What impact will this have, if any, on software providers? And how, exactly, might the government go about ‘rebalancing the responsibility to defend cyberspace’?
When we talk about “taking the burden off end users and shifting the responsibility to the “owners and operators of the systems that hold our data and make our society function”... who are we talking about?