Skip to content
ITIF Logo
ITIF Search

Cybersecurity

As every sector of the global economy and nearly every facet of modern society undergo digital transformation, ITIF advocates for policies that spur not just the development of IT innovations, but more importantly their adoption and use throughout the economy. In the area of cybersecurity, ITIF studies how governments and the private sector can improve the security and resiliency of computers and networks.

Daniel Castro
Daniel Castro

President

Information Technology and Innovation Foundation

Read Bio
Ash Johnson
Ash Johnson

Senior Policy Manager

Information Technology and Innovation Foundation

Read Bio
David Kertai
David Kertai

Research Assistant

Information Technology and Innovation Foundation

Read Bio

Featured

Europe’s Cloud Security Regime Should Focus on Technology, Not Nationality

Europe’s Cloud Security Regime Should Focus on Technology, Not Nationality

The EU’s new cloud cybersecurity regime should focus on good security practices, as the U.S. FedRAMP regime does. Emulating China’s protectionist focus on firm nationality is a bad security practice that weakens transatlantic influence over cybersecurity issues globally.

The Effect of International Proposals for Monitoring Obligations on End-To-End Encryption

The Effect of International Proposals for Monitoring Obligations on End-To-End Encryption

European and U.S. policymakers have proposed imposing monitoring obligations on Internet intermediaries to improve online safety. Despite their best efforts, these proposals risk undermining users’ privacy by eliminating the use of end-to-end encryption. Therefore, policymakers should not pursue them.

More Publications and Events

August 10, 2026|Reports & Briefings

How Policymakers Should (and Shouldn’t) Address Chatbot Safety for Children

Policymakers are rushing to regulate AI chatbots. But they should carefully weigh the best approaches to enable safe usage while meaningfully protecting children from harm.

July 27, 2026|Testimonies & Filings

Comments to Office of the Privacy Commissioner of Canada Regarding Online Age Assurance

Age assurance should not become a default prerequisite for accessing the Internet, but it can still hold a place in a comprehensive approach to children’s online safety.

July 24, 2026|Presentations

Capitol Hill Conference on AI, Cyber, & Tech Policy Priorities

Daniel Castro speaks about the importance of accelerating AI adoption in the U.S. economy at the Capitol Hill Conference on AI, Cyber, & Tech Policy Priorities hosted by the Lexington Institute.

July 8, 2026|Presentations

"Artificial Intelligence and International Security: Challenges and Governance" International Symposium

Daniel Castro presented on the evolving role of frontier AI firms in international security at an international symposium hosted by the University of International Relations in Beijing.

June 30, 2026|Events

The New Push for a National Data Privacy Standard

Watch now for an expert panel discussion on the current state of federal privacy negotiations and the path forward for Congress.

June 26, 2026|Blogs

Congress Can Strengthen State and Local Cybersecurity in One Bill

Rather than creating a new funding program for the Multi-State Information Sharing and Analysis Center, Congress should incorporate its funding into the reauthorization of the State and Local Cybersecurity Grant Program. This approach would preserve critical cybersecurity services while improving coordination between the Cybersecurity and Infrastructure Security Agency and the Center for Internet Security.

June 23, 2026|Events

Backdoors and Blowback: What Bill C-22 Means for Canadians

Watch now for a virtual panel presented by ITIF’s Centre for Canadian Innovation and Competitiveness on what Bill C-22 would actually do, why building in backdoors tends to introduce new security risks rather than contain them, and what a more targeted approach could look like.

June 22, 2026|Testimonies & Filings

Amicus Brief to the Supreme Court of the United States in the Case of NetChoice & CCIA v. Paxton

ITIF supports applicants seeking to vacate a Fifth Circuit stay that allowed Texas Attorney General Ken Paxton to immediately enforce Texas’s App Store Accountability Act, a law requiring app stores to implement age-verification and parental consent restrictions.

June 12, 2026|Blogs

Modernizing the National Vulnerability Database for Growing Cyber Risks

The National Vulnerability Database is struggling with growing backlogs, outdated processes, and overlapping responsibilities that threaten its effectiveness. NIST should improve coordination with CISA, modernize vulnerability management systems, and strengthen stakeholder engagement to restore trust and efficiency.

June 9, 2026|Events

Canada's Cloud Sovereignty: Where Should the Lines Fall?

Watch the first event in the Centre for Canadian Innovation and Competitiveness's series of discussions on Canadian tech policy. This discussion examined how Canada should think about sovereignty in cloud and compute, what current proposals get right and wrong, and what a more disciplined approach to digital dependence would look like.

Back to Top