Managing Cyber Risk to Systemically Important Critical Infrastructure
summary
Panel argues cybersecurity is the nation’s top systemic risk and pushes a critical‑functions framing: prioritize failures of function not just assets, run cyber stress tests and scenario planning, and treat software supply chain and cloud service providers as systemically important. Policy gaps include the 2013 list that excluded IT, poor cross‑sector data sharing, and weak incentives; remedies offered are sector‑specific performance goals, timely actionable threat intelligence, SBOMs/secure‑by‑design standards, and targeted regulatory enforcement where culture and resourcing lag.
AI-written summary · about
chapters (11)
- 0:00Introduction and panel overview
- 1:26Evolution of systemic cyber risk
- 3:13Government and industry progress
- 7:08Interconnectedness and systemic risk
- 10:01Cybersecurity as systemic risk
- 13:14Understanding and dissecting the problem
- 23:40Policy challenges with lists and designations
- 33:19Incentives and market failures
- 39:14Software supply chain focus
- 41:42Cybersecurity performance goals
- 44:10Audience Q&A and closing
related talks
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
15mCybersecurity as a National Imperative
40mProtecting What Matters Most – Tools for Managing Risk
50mBuilding Cyber Resilience - Considerations for CISOs
31mCybersecurity in Industry: Protecting Infrastructures
55mCybersecurity for High-Risk Systems
14mCyber-Protecting Critical Infrastructure
40mMulti-Front War: Mitigating Cyber Risk and Maximizing Security