Inside the plan to fix America’s never-ending cybersecurity failures

Abstract: 

The 2021 hack of Colonial Pipeline caused enormous chaos and a fuel shortage along the east coast until the company paid a comparatively measly $ 5 million ransom. Basic cybersecurity failures driven by commercial self interest led to hackers gaining access. The White House has devised a new cybersecurity strategy of "stronger government oversight, rules mandating that organizations meet minimum cybersecurity standards, closer partnerships with the private sector, a move away from the current market-first approach, and enforcement to make sure any new rules are followed". With the Russian invasion of Ukraine heightening the threat of cyberattacks from Russia, the US government is hopes to end its reliance on voluntary measures to keep the cyber domain secure. The Colonial Pipeline attack was one similar to many before, which cyber experts already knew, an attack resulting from opportunistic hackers exploiting problems companies refuse to fix or simply ignore. A false reputation of hackers having the capability to be responsible for apocalyptically large scale catastrophes has led to organizations which have been hacked to absolve themselves of responsibility. Instead, it has been clear that businesses will not invest in cybersecurity unless they are either attacked or are forced to by government regulations. There are three reasons why the cybersecurity market falls short: 1. Corporations have not been able to see the value in cybersecurity, especially in just how it can make them money. 2. Companies are not required to report being hacked so they often will hide data to prevent bad press and lawsuits. 3. The cost of cyberattacks are far beyond what a company would pay for, similar with issues of pollution.

Author: 

Patrick Howell O'Neill

Year: 

2022

Domain: 

Dimension: 

Region: 

Data Type: 

Keywords: