Archive

congress

Q&A: Where do we go from here? IST Reflections on RSAC ‘26

Q&A: Where do we go from here? IST Reflections on RSAC ‘26

Once a year, the cybersecurity community converges on San Francisco. From the expo floor to vendor pop ups in Yerba Buena Gardens, the SOMA neighborhood is abuzz for four days with hackers, researchers, and government policy experts eager to share insights. But this year, the din was a little different.

AI, congress, critical infrastructure, cybersecurity, K-12 Cyber Defense Coalition, K-12 Education, RSA, RSAC, UnDisruptable27

April 2, 2026

Who Sets the Rules? The Imminent GDPR-ification of Product Cybersecurity

Who Sets the Rules? The Imminent GDPR-ification of Product Cybersecurity

Just as Europe set the global standard for data privacy with the GDPR—without U.S. input—other jurisdictions worldwide are poised to do the same for product cybersecurity, and the window for American policymakers to act is closing fast.

congress, FAR, GDPR, IoT, legislation, OT, product cybersecurity

March 19, 2026

A Category Three Cyber Hurricane: Classifying the JLR Hack

A Category Three Cyber Hurricane: Classifying the JLR Hack

Ransomware attacks have plagued the UK this year. But in its first year, the independent Cyber Monitoring Centre is providing transparent, impartial incident assessments, modeled on natural disaster severity scales, to quickly inform the ecosystem in the wake of an attack. In a new blog post, IST Senior Vice President for Policy Nicholas Leiserson unpacks the program and calls on policymakers in the U.S. and beyond to franchise the model.

congress, cyber insurance, cybersecurity, metrics

November 12, 2025

Cyberscoop: Don’t let Congress punt on cyber insurance reform

In the News, Op-ed

Cyberscoop: Don’t let Congress punt on cyber insurance reform

A recent op-ed in Cyberscoop by Nick Leiserson and Mark Montgomery calls on Congress to urgently establish a government-backed cyber reinsurance program to address the major systemic risks currently threatening the cyber insurance market.

congress, cyber insurance, cybersecurity, insurance, reinsurance, systemic risk, TRIA

November 3, 2025

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

In comments to the Congressional Universal Service Fund Working Group, Nicholas Leiserson and Michael Klein urge Congress to include cybersecurity as a fundable activity for the E-Rate and Rural Healthcare programs as part of any Universal Service Fund reform effort.

congress, cyber, cybersecurity, E-Rate, education, k-12, RFI, schools, Universal Service Fund

September 16, 2025

Reauthorization of CISA ’15: 10 Years Later, New Threats, Exigent Urgency

In the News, Op-ed

Reauthorization of CISA ’15: 10 Years Later, New Threats, Exigent Urgency

In an op-ed for Claroty Nexus, IST Chief Strategy Officer Megan Stifel calls on Congress to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA ’15), which improves and incentivizes the sharing of cyber threat indicators and information about defensive measures taken against cyber threats between public and private sectors.

CISA 15, congress, cybersecurity, information sharing, public-private collaboration

September 15, 2025

Cybersecurity Considerations for Universal Service Fund Reform

Cybersecurity Considerations for Universal Service Fund Reform

As the speed, scope, and impact of cyber threats to K-12 schools continues to increase, Congress has expressed a clear desire to reinvigorate the Universal Service Fund (USF) through legislation. IST SVP for Policy Nicholas Leiserson explores how USF funding, through the FCC's E-Rate Program, could bolster cybersecurity resources for K-12 schools.

congress, cyber, cybersecurity, E-Rate, education, k-12, schools, Universal Service Fund, USF

July 25, 2025

Congressional Oversight on Salt Typhoon: Missing An Opportunity

Congressional Oversight on Salt Typhoon: Missing An Opportunity

The Salt Typhoon intrusion into U.S. telecom networks is “one of the greatest intelligence operations ever conducted against the United States.” How should Congress have responded? IST Senior Vice President for Policy Nicholas Leiserson unpacks the missed opportunities for oversight, and the path forward.

China, congress, cybersecurity, legislation, PRC, Salt Typhoon, SolarWinds

May 6, 2025

Testimony: Stopping Digital Thieves: The Growing Threat of Ransomware

Testimony: Stopping Digital Thieves: The Growing Threat of Ransomware

On July 20, 2021, Institute for Security and Technology CEO Philip Reiner testified in front of the Subcommittee on Oversight and Investigations of the Committee on Energy and Commerce for a hearing entitled, "Stopping Digital Thieves: The Growing Threat of Ransomware."

congress, Ransomware, Ransomware Task Force, testimony

July 20, 2021

NC3 Decision Making: Individual Versus Group Process

NC3 Decision Making: Individual Versus Group Process

Dr. Alex Wallerstein sketches a framework for thinking about how concentrated nuclear use authority should be at the top. While he discusses specific U.S. proposals for reform in response to recent domestic debates, the scope of his analysis is uniquely global and includes a comparative analysis of the approach of all nine nuclear weapons states.

civil-military, cold war, congress, Constitution, deterrence, enrichment, migration, NC3, nuclear codes, Senate, stability, status quo, STRATCOM, Strategy, UK

August 8, 2019