Analysis

Explore our research

Search

Filters

Analysis Type

Pillar / Project

Source

Topics

Author

Year

Cybersecurity Considerations for Universal Service Fund Reform

As the speed, scope, and impact of cyber threats to K-12 schools continues to increase, Congress has expressed a clear desire to reinvigorate the Universal Service Fund (USF) through legislation. IST SVP for Policy Nicholas Leiserson explores how USF funding, through the FCC's E-Rate Program, could bolster cybersecurity resources for K-12 schools.

congress, cyber, cybersecurity, E-Rate, education, k-12, schools, Universal Service Fund, USF

July 25, 2025

Exercise VEIL STORM I: After Action Report

In partnership with Europol, the Institute for Security and Technology and the Ransomware Task Force’s International Engagement Working Group designed and delivered Exercise VEIL STORM I, a tabletop exercise focused on operational collaboration across international law enforcement agencies and private sector firms in responding to cyber incidents. This after-action report summarizes the proceedings and key takeaways of the exercise.

cyber insurance, cybersecurity, disruption, Europol, information sharing, operational collaboration, public-private collaboration, Public-private partnerships, Ransomware

July 23, 2025

Plan directeur de défense contre les rançongiciels

En réponse à la mesure 3.1.1 du rapport du Groupe de travail sur la lutte contre les rançongiciels, qui recommande à la communauté de la cybersécurité d’« élaborer un cadre clair de mesures exécutables d’atténuation, d’intervention et de récupération relatives aux rançongiciels », le Groupe de travail sur le Plan directeur de défense contre les rançongiciels a intégré au présent document un sous-ensemble structuré de mesures de protection essentielles en matière de cyberhygiène3, puisées dans le site Web Contrôles de sécurité essentiels du contrôles du CIS® v8.

blueprint, cybersecurity, defend, protect, Ransomware, respond

July 14, 2025

Nuclear Command, Control, and Communications (NC3): A Primer on Strategic Warning, Decision Support, and Adaptive Targeting Subsystems

Originally drafted to guide substantive discussions for a scenario-driven workshop hosted by IST in Washington, DC on the risks and opportunities of AI integration in NC3, this primer provides a technical and in-depth overview and analysis of strategic warning, decision support, and adaptive targeting subsystems that comprise the NC3 “system of systems.”

adaptive targeting, decision support, NC3, NC3 architecture, nuclear, strategic warning, system of systems

July 7, 2025

“We were always prey:” Q&A with Joshua Corman on U.S. critical infrastructure vulnerabilities

As global tensions escalate, how vulnerable are our lifeline critical infrastructure like water, power, and hospitals, really? IST Executive in Residence Joshua Corman spoke with The Verge’s Justine Calma to break down what sectors are at risk, the consequences of a cyber attack, and UnDisruptable27’s plan to increase community resilience.

critical infrastructure, Cyber Civil Defense, Cyber Resilience Corps, cyber-informed engineering, hospitals, power, Volt Typhoon, water

June 27, 2025

Securing the Signal: Mitigation Strategies to Strengthen Crisis Communication Channels

As global norms are challenged and emerging technologies accelerate, crisis communication systems between nuclear-armed states face urgent new threats. This report identifies four critical scenarios and outlines a matched set of mitigation strategies designed to reinforce the reliability of crisis communications in high-stakes environments.

CATALINK, cold war, crisis communications, electromagnetic pulse, EMP, escalation, miscalculation, nuclear

May 28, 2025

Foreign Policy: Trump’s Vagueness Over Nuclear Testing Could Fuel an Arms Race

In the News, Op-ed

Foreign Policy: Trump’s Vagueness Over Nuclear Testing Could Fuel an Arms Race

The delicate balance of nuclear deterrence relies on clarity. But what happens when a major power embraces ambiguity on a core issue like weapons testing? IST Senior Policy Advisor Sahil V. Shah calls for clarification in a new op-ed in Foreign Policy.

nuclear, nuclear weapons, deterrence, strategic stability, arms race, testing

AI, NC3, and Strategic Stability: Scenario Exercise

AI, NC3, and Strategic Stability: Scenario Exercise

How might the integration of AI into global NC3 systems transform strategic stability and deterrence dynamics? In Washington, D.C. this spring, IST convened more than 60 senior officials, technical experts, and civil society actors for an in-depth analysis of the risks and opportunities of AI in NC3 using this scenario exercise.

AI, nuclear, nuclear command, TTX, decision support, adaptive targeting, strategic warning, scenario

CVE at a Crossroads: A Blueprint for the Next 25 Years

CVE at a Crossroads: A Blueprint for the Next 25 Years

The Common Vulnerabilities and Exposures (CVE) Program is a critical public good, yet it is at a crossroads. Established by MITRE with support from the U.S. government, the index of software vulnerability identifiers has been a core element of software security since 1999. But recent funding issues have laid bare fundamental challenges, and without action, the vulnerability identification landscape will fragment. This report provides recommendations for global policymakers on how to reimagine the CVE Program for the next 25 years.

software, CVE, vulnerability management, Common Vulnerabilities and Exposures, Global Vulnerability Catalog, National Vulnerability Management Program, vulnerability identification

Nick Leiserson and Michael Klein: Urgent Changes Needed to Update the E-Rate Program

In the News, Op-ed

Nick Leiserson and Michael Klein: Urgent Changes Needed to Update the E-Rate Program

For Broadband Breakfast, IST Senior VP for Policy Nicholas Leiserson and Senior Director for Preparedness and Response Michael Klein make the case for expanding the FCC’s E-Rate program to bolster the cybersecurity resilience of K-12 schools.

cybersecurity, Ransomware, Universal Service Fund, E-Rate, K-12 Education