The CISOs Role in Shaping Public Policy Pete Chronis @chronis

Why should CISOs should care about public policy? “There are many ways of going forward, but only one way of standing still.” - FDR

Why should CISOs should care about public policy? We need a common, national strategy focused on improving cybersecurity. Who better to influence the policy debate than cybersecurity pros?

Cybersecurity Bills Enacted in the 113th and 114th Congresses Federal legislative action is not adequately addressing the problem Cybersecurity Bills Enacted in the 113th and 114th Congresses Public Law Bill No. Title P.L. 113-246 H.R. 2952 Cybersecurity Workforce Assessment Act P.L. 113-274 S. 1353 Cybersecurity Enhancement Act of 2014 P.L. 113-277 S. 1691 Border Patrol Agent Pay Reform Act of 2014 P.L. 113-282 S. 2519 National Cybersecurity Protection Act of 2014 P.L. 113-283 S. 2521 Federal Information Security Modernization Act of 2014 P.L. 114-113 H.R. 2029 Cybersecurity Act of 2015 (Division N), including Cybersecurity Information Sharing Act (Title I) National Cybersecurity Protection Advancement Act of 2015 (Subtitle A of Title II) Federal Cybersecurity Enhancement Act of 2015 (Subtitle B of Title II) Federal Cybersecurity Workforce Assessment Act of 2015 (Title III) Title IV

Federal agencies are limited to what they can do and their roles are not always clear

NTSC Mission The National Technology Security Coalition (NTSC) champions policies that improve national cybersecurity standards and awareness. Through dialogue, education and government relations, we unite the public and private sector stakeholders as the preeminent advocacy voice for the CISO. The NTSC is a non-profit, non-partisan trade association.

NTSC Core Initiatives National Data Breach Notification Legislation NTSC supports enactment of a meaningful and uniform federal national data breach notification law that is consistent, predictable, and feasible on how an affected person shall be notified. Public-Private Intelligence Information-Sharing NTSC promotes information sharing partnerships to create a more robust and resilient cybersecurity alliance to protect both private and public sectors’ critical infrastructures from cyber threats.   Cybersecurity Workforce Development NTSC promotes policies that strengthens the nation’s ecosystem of cybersecurity education, training and workforce development.

NTSC/CSA: Working Together Cybersecurity Policy + Cybersecurity Advocacy Cybersecurity Awareness Cloud Security Standards + Cloud Security Advocacy Cloud Security Awareness

Tackling Cloud Vendor Security How can the NTSC and CSA we work together to… Improve vendor security by partnering together to promote the adoption of cybersecurity best practices.

NTSC Vendor Security Vision

How are we going to do it? The NTSC and CSA will partner to help create guidance to help CISOs incorporate CSA/STAR evaluations into their company‘s vendor reivew processs. We’ll get the word out later this year through... Whitepaper Webinars Speaking engagements

A special thank you to the Cloud Security Alliance For info on the NTSC, visit www.ntsc.org