Cybersecurity

Presidential Cybersecurity Commission Issues Ambitious Policy Roadmap For Next Administration

On Thursday, December 1, the nonpartisan Commission on Enhancing National Cybersecurity, established pursuant to an Executive Order in February, issued its report, outlining more than 50 recommendations for the next Administration.

 Among the most striking are calls for:

• regulatory agencies to "harmonize existing and future regulations with the National Institute of Standards and Technology (NIST) Cybersecurity Framework to focus on risk management—reducing industry's cost of complying with prescriptive or conflicting regulations that may not aid cybersecurity and may unintentionally discourage rather than incentivize innovation";
• the federal government to "extend additional incentives to companies that have implemented cyber risk management principles and demonstrate collaborative engagement";
• development by a private body of "the equivalent of a cybersecurity 'nutritional label' for technology products and services—ideally linked to a rating system of understandable, impartial, third-party assessment that consumers will intuitively trust and understand"...