Policy Documents

Government Cyber Failures Reveal Weaknesses of Regulatory Approach to Cybersecurity

Paul Rosenzweig, David Inserra –
June 13, 2013
Last year, the Senate twice voted down the Cybersecurity Act of 2012 because of concerns that a regulatory approach might harm U.S. cybersecurity efforts. Despite these concerns, President Obama issued a cybersecurity executive order that uses a regulatory or standards-based approach to require additional security from private-sector organizations. The government, however, already requires its own agencies to follow existing cybersecurity standards. The best way to see the effectiveness of cybersecurity standards is to observe how well the government has handled its own security guidelines.