The National Cybersecurity Strategy and the Future of “Coordinated Vulnerability Disclosure Across All Technology Types and Sectors”

Organizations across all industry sectors (and their Board of Directors) should take a look at our recent analysis of the evolution of the upcoming SEC cybersecurity rules and  CISA’s Pilot Ransomware Warning System and Pre-Ransomware Notification Initiative.  Running parallel to the importance of these developments at the SEC and CISA is our research (including great OODAcast conversations) on Threat Intelligence and Coordinated Vulnerability Disclosure (CVD) – related processes that can support each other and contribute to cybersecurity resilience across all technology types and sectors.  Like the real danger of AI innovation at exponential speed and scale – and not adequately addressing AI governance, we hope that the National Cybersecurity Strategy becomes truly actionable and experiences a broad national implementation to address the severity of the cybersecurity challenges ahead. Threat intelligence and CVD should be central to such future efforts.