The Securities and Exchanges Commission is emphasizing the concept of “materiality” in cybersecurity. Materiality will graduate cybersecurity to an enterprise risk and force public companies to rethi…

Encryption, cybersecurity, and technology policies, like the RESTRICT and EARN-IT Acts, with nonexistent tradeoffs address symptoms, not problems, and they do it badly.    

Small businesses are critical to U.S. national security. They’re also increasingly targeted by foreign cyberattacks. The federal government can do more to protect them.

Election security has been a major issue since the 2020 U.S. election. Policymakers and members of the public must take several concrete steps to ensure that elections are secure and free from interf…

The U.S. Cybersecurity Review Board was established to provide a definitive history of major cyber incidents. Today it has fallen away from that mission, but there are three incidents to investigate …

Recent regulations have focused on adding cybersecurity experience to company boards. However, companies would be better served if CISOs were required to gain expertise in business risk communication…