Cybersecurity and Infrastructure Security Agency (CISA)
20 Articles

The Latest North Korea Cyber Indictment Should Serve as a Model
Last week, the Biden administration’s Department of Justice (DOJ) announced its first major cyber-related indictment. An investigation long in the works, the indictment charges…

“Strategic Silence” and State-Sponsored Hacking: The US Gov’t and SolarWinds
The absence to date of executive branch attribution and condemnation of the SolarWinds intrusions may be strategic silence—a tactic employed in the immediate aftermath of past…

A Post-Election Trump Firing Makes the Case for an Independent, Regulatory CISA
Incoming President Biden and Congress should seize the moment of the agency’s high profile to strengthen its role in protecting critical US infrastructure.

What the Pandemic Tells Us About the State of U.S. Cybersecurity
The Cyberspace Solarium Commission sees lessons on risk assessment, resilience, public-private collaboration, and more.

OmniCISA Pits DHS Against the FCC and FTC on User Privacy
On Friday, Congress will vote on a mutated version of security threat sharing legislation that had previously passed through the House and Senate. These earlier versions would…

Does CISA Contain a Surveillance Law XSS Attack?
Skeptical concerns about the proposed Cybersecurity Information Sharing Act have, thus far, tended to fall into two main categories: Doubts about efficacy—most actual practitioners…

Legislative Cyber Threats: CISA’s Not The Only One
If anyone in the United States Senate had any doubts that the proposed Cyber Information Sharing Act (CISA) was universally hated by a range of civil society groups, a literal…

OPM, CISA, and the Cybersecurity Oxymoron
In Congress, bad policy ideas are like vampires: They are very hard to kill because they’re always somehow coming back from the dead. Such is the case with this year’s iteration…