ISA to Lead Joint DHS - IT Sector Cybersecurity Policy Initiative
ISA president Larry Clinton to lead the joint cybersecurity policy effort.
October 3, 2017
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt850556f866500627/654a5a8e05eb4d040a046894/325351_DR23_Graphics_General_Large_Text_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
PRESS RELEASE
WASHINGTON, D.C. – Internet Security Alliance (ISA) President Larry Clinton has been named to lead a joint cybersecurity policy effort between DHS and the IT Sector Coordinating Council. The announcement was made at DHS during the annual joint meeting of the Government Coordinating Council with the IT Sector Coordinating Council on Sept. 29.
A joint statement that circulated prior to the meeting said, "While cybersecurity is now acknowledged as a critical priority by government and industry alike, the near-universal recognition of the problem often spurs divergent initiatives from policymakers across the USG and the states…(that are) often uncoordinated raising the specter of not only siloed but often regulatory proposals calling for the premature development and implementation of cybersecurity measures or metrics that favor compliance based cybersecurity models that are disconnected from any clear cybersecurity benefit. Further, cybersecurity threats from sophisticated and well-resourced adversaries including nation-states continue to grow to raise concerns that essential US public and private sector actors may not be adequately prepared to launch a coordinated response to a potential cybersecurity incident of national significance"
In response, the new initiative is charged with pursuing three joint policy goals that have been agreed to by DHS and the IT SCC. These goals are regulatory streamlining, promoting the NIST cybersecurity framework, and ICT mobilization, especially with respect to being prepared for a cyber incident of national significance.
ISA's Clinton welcomed the new initiative. "We have jointly realized that we are at an inflection point with respect to cybersecurity. We now need a more intensified and coordinated policy approach. For example, while we are all big fans of the NIST Framework now, three years past implementation, we have still not prioritized its elements nor determined how it can best used in a cost-effective manner. Moreover, we are now seeing a weed-like growth in cyber regulatory efforts that have not been shown to be effective but are diverting scarce security resources to redundant and conflicting regulatory regimes. If we are going to make progress in preparing ourselves for potentially ever larger cyber events, we need to get our arms around these efforts and develop a coordinated and empirically proven effective cybersecurity strategy. That is what we are hoping to do through this new initiative," Clinton said.
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024