The Securities and Exchanges Commission is emphasizing the concept of “materiality” in cybersecurity. Materiality will graduate cybersecurity to an enterprise risk and force public companies to rethi…

Encryption, cybersecurity, and technology policies, like the RESTRICT and EARN-IT Acts, with nonexistent tradeoffs address symptoms, not problems, and they do it badly.    

Election security has been a major issue since the 2020 U.S. election. Policymakers and members of the public must take several concrete steps to ensure that elections are secure and free from interf…

The U.S. Cybersecurity Review Board was established to provide a definitive history of major cyber incidents. Today it has fallen away from that mission, but there are three incidents to investigate …

The EARN IT Act is back for a third time. The current version purports to both maintain privacy and protect children, but this is a false dichotomy; the act would expand state power and decrease user…

Recruiting problems in cybersecurity will continue until private and public sector organizations make defenders' mental health a priority and policymakers address the poorly written Computer Fraud an…