Cyberspace Solarium Commission 2.0 with Mark Montgomery
Mar 7, 2024
auto_awesome
Mark Montgomery, Senior Director at the Foundation for the Defense of Democracies, is on a mission to advance cybersecurity strategies through CSC 2.0. He shares insights into the evolution of the NIST cybersecurity framework and its role in enhancing organizational governance. The discussion also highlights cybersecurity as a potential economic enabler in the UK, shifting perceptions from its traditional view as a roadblock. Montgomery addresses the urgent need for improved protections for critical infrastructure and the complexities surrounding encryption policies.
The updated Cybersecurity Framework 2.0 now includes a governance function, underscoring the crucial role of leadership in enhancing cybersecurity practices across all organizational levels.
The Cyber Solarium Commission has made substantial progress in implementing cybersecurity policy recommendations, yet significant challenges remain, particularly in securing critical infrastructure sectors like water and healthcare.
Deep dives
Update on Cybersecurity Framework 2.0
The recently released Cybersecurity Framework 2.0 introduces significant changes aimed at enhancing organizational governance in cybersecurity. Previously centered on five core functions—identify, protect, detect, respond, and recover—the updated framework adds a governance function that spans all these areas. This addition signifies a growing recognition that organizational leadership must take a more active role in cybersecurity, offering necessary support and guidance to operational teams. By incorporating governance at this level, the framework enhances its applicability across organizations of varying sizes and sectors, thereby encouraging more robust cybersecurity practices worldwide.
UK Government's Independent Review on Cybersecurity
The UK government is initiating an independent review to assess cybersecurity as a facilitator of economic growth, marking a shift in how security measures are perceived. Traditionally viewed as an obstacle to innovation and development, this new perspective aims to reposition cybersecurity as a catalyst for business opportunities. Additionally, another initiative from the Home Office seeks to strengthen cyber protection laws and practices, particularly focused on enhancing security protocols for online transactions and reducing data breach risks. These initiatives highlight the need for a collaborative approach between government agencies and the private sector in addressing cybersecurity issues.
Cyber Solarium Commission's Ongoing Impact
The Cyber Solarium Commission has made notable strides in shaping cybersecurity policy and frameworks through its comprehensive set of recommendations. Established to address the lack of a cohesive national strategy for cybersecurity, the commission has successfully completed approximately 70% of its original recommendations, demonstrating significant progress in federal cybersecurity measures. The commission's work involves collaboration between various congressional leaders and agencies, ensuring that legislative efforts reflect contemporary cybersecurity challenges. The establishment of a national cyber director and provisions for strengthening agencies like CISA exemplifies how the commission's efforts are influencing long-term cybersecurity strategies.
Challenges in Addressing Critical Infrastructure Security
Significant challenges remain in securing critical infrastructure against cybersecurity threats, with particular focus on sectors like water, energy, and healthcare. The need for improved cybersecurity measures is urgent, especially in light of recent ransomware incidents affecting healthcare facilities, which show a direct link to increased morbidity rates. Legislative actions aiming to strengthen the cybersecurity infrastructure of these vital sectors are essential but face considerable obstacles in garnering bipartisan support. Alongside this, there is a call to develop workforce training programs focused on equipping federal cybersecurity personnel to effectively respond to emerging threats and vulnerabilities.
In our latest Distilling Cyber Policy podcast episode, Alex Botting and Jen Ellis from the Center for Cybersecurity Policy & Law are joined by Mark Montgomery, Senior Director and Senior Fellow at the Foundation for the Defense of Democracies (FDD). At FDD, Mark leads CSC 2.0, an initiative that works to implement the recommendations of the congressionally mandated Cyberspace Solarium Commission, where he served as executive director. The discussion delves into the Commission and its March 2020 report and associated recommendations, as well as CSC 2.0's emerging priorities.