Shostack + Friends Blog


Thoughts on the Executive Order

Finally! A Cybersecurity Safety Review Board is a new article by Steve Bellovin and myself at Lawfare.

One element of President Biden’s executive order on cybersecurity establishes a board to investigate major incidents involving government computers in somewhat the way that the National Transportation Safety Board investigates aviation disasters. The two of us, among many others, have been advocating for such a board for many years. The creation of the board is a good first step, possibly as much as can be done without legislative action. But we think that additional action is needed and will magnify the value the board offers.