Join the National Security Risk Analysis CoP on 28 July at 1200 ET! Our speaker will be Sasha Romanosky presenting "
State of Cybersecurity: Current Failures, and Emerging Solutions"
After 20 years of professional research and practice, the information security field still faces a number of fundamental failures and challenges which, collectively, reduce our ability to measure, communicate, and manage cyber risk. In some cases the challenges are technical while in other cases the challenges are policy and incentives-based. In this talk, I will describe some of these failures, but I will also discuss emerging solutions including cyber insurance, software bill of materials (SBOM), Cyber NTSB, and emerging threat models, and I will discuss why I think these may (or may not) succeed.
Sasha Romanosky is a Senior Policy Researcher where he studies topics on the economics of security and privacy, national security, cybercrime, and law & economics. Sasha holds a Ph.D. in Public Policy and Management from Carnegie Mellon University and a B.S. in Electrical Engineering from the University of Calgary, Canada. He is one of the original authors of the Common Vulnerability Scoring System (CVSS), an international standard for scoring computer vulnerabilities (ITU-T X.1521), and co-creator of EPSS, an emerging standard for predicting software vulnerability exploitation. Sasha is a former Cyber Policy Advisor in the Office of the Secretary of Defense for Policy (OSDP) at the Pentagon, and an appointed member of DHS's Data Privacy and Integrity Committee (DPIAC), where he advises the Secretary of Homeland Security and DHS's Chief Privacy Officer on policy, operational, and technology issues.
To participate, please use the below:
Link to Join: https://meet.goto.com/MORSMeeting50a/national-security-risk-analysis
You can also dial in using your phone.
United States: +1 (646) 749-3122
Access Code: 415-074-061