Moving Regulation Upstream: The Role of Digital Service Providers
A panel of cyber policy experts discusses shifting regulatory burdens upstream to major digital service providers to protect organizations below the security poverty line.
Summary
The Crisis of the Cyber Poverty Line
Small businesses, local governments, and hospitals struggle to achieve basic cyber resilience due to constrained financial budgets and severe cybersecurity staffing shortages.
Shifting the Burden: Moving Security Upstream
The panel explores why cybersecurity responsibilities must transition away from end-users and under-resourced organizations toward major cloud platforms and software vendors.
Regulatory Mandates and Secure-by-Design Standards
The speakers debate government policies, liability frameworks, and default security standards (e.g. mandatory multi-factor authentication, secure default configurations).
Architecting Collective Defense Across Digital Supply Chains
The discussion outlines strategic policy roadmaps for building resilient national cyber defense architectures.
Related talks
Main Stage·35 min
Jen Easterly · Scott Shapiro
CISA Director Jen Easterly and Yale Professor Scott Shapiro discuss the history of major cyber intrusions and the necessity of Secure-by-Design engineering.
Main Stage·46 min
International cyber policy leaders discuss shared global challenges in software supply chain integrity, common vulnerability management, and multilateral defense.
Main Stage·43 min
Bruce Schneier
Bruce Schneier argues that security technologists have a moral obligation to engage with policy and serve the public interest, not just clients.