A National Initiative for Cybersecurity Advancement
summary
A CERT at Carnegie Mellon–led research project called National Initiative for Cybersecurity Advancement argues current tools and one‑off training fail, catalogs 70 issues across the ecosystem, and applies a Heilmeier‑style taxonomy into seven workstreams: awareness, usability, capability, flexibility, visibility, comprehension, and consilience. Findings: workforce gaps and complexity dominate, UEFI looks like a potential systemic risk, one‑and‑done training is ineffective, and roughly 83% cost of Zero Trust implementations comes from discovering and classifying data. Proposals include cyber ergonomics, AI‑for‑cyber and cyber‑for‑AI test/eval, automated fault‑and‑repair, and measurable risk metrics.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:27Cybersecurity today
- 5:03Research agenda
- 8:18Heilmeier Catechism
- 11:57Cyber ecosystem
- 17:46Risk management
- 25:20Seven research areas
- 26:22Awareness and education
- 31:21Usability challenges
- 33:34Defense flexibility
- 36:11Situational awareness
- 37:20Software reliance
- 40:29Interdisciplinary collaboration
- 41:31Audience participation
- 43:21Next steps
- 47:41Q&A
related talks
50mPerspectives on the Developing Cyber Workforce Strategy
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
01h 05mWhat It Takes to Lead America’s Vulnerability Management Team
19mCybersecurity's Silent Crisis: Protecting the Human Element
11mCybersecurity for an Inclusive Future
47mCybersecurity: Is It about Business or Technology?
01h 09mKeynote: What Do We Owe One Another In Cybersecurity?
15mSecuring IoT: Why Tech Isn't Enough (An NCSC Perspective)