Defining a Collective Defense and Response

May 15, 2019 3:00 PM

Currently, our efforts to defend information systems and respond to incidents is based on a combination of government led actions, isolated regulations, and creating a culture of information sharing between industry, government, and the security research community. Although there are many positive actions and activities, the current environment can be characterized by independent actions with brittle boundaries between these three actors (e.g., government, industry, and security research community). These brittle boundaries are created by a variety of factors including, regulations, business and technology, and the potentially ephemeral nature of the current focus on information sharing. Looking forward, there is a need for the abilities of government, industry, and the security research community to work collectively together in defending systems and responding to incidents. This collective defense will involve changes in technology, regulations (and laws) and governance, and the fluid movement of information and actions across all actors. The framework for the collective defense will be discussed with case studies from other sectors and environments.

Speaker Information

Panelist Information

Evan D. Wolff

Crowell & Moring llp

Evan D. Wolff possesses the hands-on experience in the technologies and policies that govern the cybersecurity space and is an authority on cybersecurity and privacy regulations. Previously an advisor to senior DHS leadership, Evan is a thought leader on government initiatives in public and private sector coordination in addressing cyber issues. As Crowell & Moring's Privacy & Cybersecurity Practice Co-chair, Evan has advised companies and their boards on hundreds of data breaches and advises companies on network security, investigation coordination after intrusions, data breaches, and insurance issues. He takes an innovative approach to developing blended legal, technical, and governance mechanisms so companies are prepared with a rapid and comprehensive response, including conducting incident simulations Evan is an adjunct professor at George Mason School of Law; a fellow at Woodrow Wilson International Center; and a member of the Sandia National Lab External Advisory Board, and the Aspen Institute's Homeland Security Group.