Cyber Safety Review Board – Looking Back to Move Forward
summary
The Cyber Safety Review Board, created by the 2021 executive order, issues fact‑finding reports with concrete fixes: the Log4j review labels it an endemic vulnerability, cites that one firm saw 11% of 2022 incident response work tied to Log4j, and recommends asset discovery, vulnerability management, SBOMs, and secure‑coding training in curricula. The board seeks legislative permanence and limited subpoena authority. Current work analyzes Lapsus$ compromises amid a landscape of ~3,500 attacker groups and average dwell times near 14 days.
AI-written summary · about
chapters (10)
- 0:00Introduction and welcome
- 1:01Public-private partnership importance
- 5:21CSRB mission and design
- 9:53Log4j investigation overview
- 16:16Log4j findings and epiphanies
- 23:58Private sector collaboration process
- 28:19Second investigation on Lapsus$
- 34:07Cybersecurity crisis and trends
- 34:28CSRB future vision and goals
- 38:29Q&A on prescriptive recommendations
related talks
40mThe Cyber Solarium Commission: What is Left to Be Done?
47mNational Cyber Strategy, Roadmap for a Secure Cyber Future: Year in Review
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
27m4 Panel Session - Bridging Policy and Practice
01h 02m2024 Security BSides // Juliet Okafor
44mPanel Discussion: Prepare for the CRA: Open Source Governance in the Age of Cyber Resilience
27mSecurity: The Thing That Everyone...
53mThe Cyber Resilience Act: Navigating Its Impact on Yocto-Based Products