Michael Razeeq, a 2024 New America #SharetheMicinCyber Fellow, dives into the legal intricacies surrounding civilian cyber corps (C3s) and their vital role in cybersecurity. He discusses how laws across states affect the effectiveness of these volunteer organizations. The podcast also covers a landmark antitrust ruling against Google, assessing its implications for the tech industry. Additionally, there's a conversation about proposed legislation to classify ransomware as a terrorist threat, reflecting broader challenges in cybersecurity and international relations.
Civilian cyber corps' effectiveness varies by state due to differing statutes, which impact the accountability and liability of volunteer efforts.
A recent antitrust ruling affirmed Google's monopoly status, indicating a major shift in antitrust law that could affect the tech industry's competition dynamics.
Deep dives
Liability Concerns in Volunteer Cybersecurity
Liability issues are a central concern in volunteer cybersecurity efforts, particularly regarding the handling of sensitive data and systems. As volunteers go into organizations' networks to provide services, the possibility of something going wrong raises significant legal questions. States that have established civilian cyber corps have implemented statutes that outline the responsibility and accountability of volunteers in these roles. However, many existing laws do not reference the Volunteer Protection Act of 1997, which could help address liability concerns, highlighting an area for potential improvement in state legislation.
Antitrust Implications of Google's Monopoly Status
A recent federal court ruling recognized Google as a monopoly under the Sherman Antitrust Act, with implications for its practices in search engines and advertising. The judge pointed out that Google's dominance in search was bolstered by its payments to companies like Apple and Samsung to secure default status as the search engine on devices. Despite Google's argument that consumers have choices, evidence suggests that the power of default settings significantly limits competition. This landmark decision is seen as a significant turning point in antitrust law concerning big tech companies and may prompt further actions against others like Apple and Amazon.
The Role of Civilian Cyber Corps
Civilian cyber corps are volunteer groups that provide essential cybersecurity services, ranging from proactive education to reactive incident response. These organizations, found in states like Maryland and Texas, have evolved from informal collaborations to structured units under state laws, offering their expertise in mitigating cyber threats. Their capabilities include vulnerability testing, training, and assisting during cyber incidents, with varying levels of statutory authorization affecting their deployment. Research focuses on understanding how different state laws impact these corps' effectiveness and operational scope.
Potential Federal Support for Cybersecurity Initiatives
At the federal level, there is growing interest in establishing a national civilian cyber corps, supported by legislation such as the National Defense Authorization Act. While a feasibility study is pending, the aim is to create a federal framework that parallels existing state efforts, enhancing cyber response capabilities across the nation. In addition, agencies like CISA are working to centralize resources, connecting state-level initiatives with federal oversight. This momentum suggests a future where civilian volunteer cybersecurity efforts may receive robust backing and resources as cyber threats continue to evolve.
Michael Razeeq, 2024 New America #SharetheMicinCyber Fellow, is discussing his research on the ways that laws governing civilian cyber corps (C3s) in states like Maryland, Michigan, Ohio, and others can help or hinder those organizations. Ben covers the groundbreaking anti-trust Court decision against Google. Dave looks at a new bill that would elevate ransomware to a terrorist threat.
While this show covers legal topics, and Ben is a lawyer, the views expressed do not constitute legal advice. For official legal advice on any of the topics we cover, please contact your attorney.
Please take a moment to fill out an audience survey! Let us know how we are doing!
A companion weekly newsletter is available CyberWire Pro members on the CyberWire's website. If you are a member, make sure you subscribe to receive our weekly wrap-up of privacy, policy, and research news, focused on incidents, techniques, tips, compliance, rights, trends, threats, policy, and influence ops delivered to you inbox each Thursday.
Got a question you'd like us to answer on our show? You can send your audio file to caveat@thecyberwire.com. Hope to hear from you.