Cybersecurity
Navigate forward to interact with the calendar and select a date. Press the question mark key to get the keyboard shortcuts for changing dates.
Navigate backward to interact with the calendar and select a date. Press the question mark key to get the keyboard shortcuts for changing dates.
As every sector of the global economy and nearly every facet of modern society undergo digital transformation, ITIF advocates for policies that spur not just the development of IT innovations, but more importantly their adoption and use throughout the economy. In the area of cybersecurity, ITIF studies how governments and the private sector can improve the security and resiliency of computers and networks.
Featured
Europe’s Cloud Security Regime Should Focus on Technology, Not Nationality
The EU’s new cloud cybersecurity regime should focus on good security practices, as the U.S. FedRAMP regime does. Emulating China’s protectionist focus on firm nationality is a bad security practice that weakens transatlantic influence over cybersecurity issues globally.
The Effect of International Proposals for Monitoring Obligations on End-To-End Encryption
European and U.S. policymakers have proposed imposing monitoring obligations on Internet intermediaries to improve online safety. Despite their best efforts, these proposals risk undermining users’ privacy by eliminating the use of end-to-end encryption. Therefore, policymakers should not pursue them.
More Publications and Events
June 30, 2026|Events
The New Push for a National Data Privacy Standard
Join ITIF for an expert panel discussion on the current state of federal privacy negotiations and the path forward for Congress.
June 23, 2026|Events
Backdoors and Blowback: What Bill C-22 Means for Canadians
Please join ITIF’s Centre for Canadian Innovation and Competitiveness for a virtual panel on what Bill C-22 would actually do, why building in backdoors tends to introduce new security risks rather than contain them, and what a more targeted approach could look like.
June 12, 2026|Blogs
Modernizing the National Vulnerability Database for Growing Cyber Risks
The National Vulnerability Database is struggling with growing backlogs, outdated processes, and overlapping responsibilities that threaten its effectiveness. NIST should improve coordination with CISA, modernize vulnerability management systems, and strengthen stakeholder engagement to restore trust and efficiency.
June 9, 2026|Events
Canada's Cloud Sovereignty: Where Should the Lines Fall?
Watch the first event in the Centre for Canadian Innovation and Competitiveness's series of discussions on Canadian tech policy. This discussion examined how Canada should think about sovereignty in cloud and compute, what current proposals get right and wrong, and what a more disciplined approach to digital dependence would look like.
June 3, 2026|Reports & Briefings
The State of Privacy: Lessons From State Laws for a National Framework
The United States’ patchwork approach to privacy is unworkable in the long term. But that patchwork is already here, and Congress can learn from the policies states have implemented to craft a national data privacy framework.
May 28, 2026|Blogs
Adapting CyberCorps SFS to AI Threats Is Key for the Future of Cybersecurity
As AI-powered cyber threats become more advanced, the federal government should modernize the CyberCorps SFS program by integrating AI-security training, reforming cyber hiring pipelines, and expanding training infrastructure to build a stronger cybersecurity workforce.
May 11, 2026|Blogs
Pre-Approval for AI Models Would Slow Innovation Without Improving Safety
Requiring government approval before releasing advanced AI models would slow innovation, politicize AI development, and weaken U.S. competitiveness. Instead, policymakers should focus on collaborative safety efforts and strengthening cybersecurity.
May 4, 2026|Blogs
States Should Learn From Each Other to Close Cybersecurity Gaps
Cyberattacks are rising across state and local governments, and the blog recommends that all states adopt coordinated strategies, clear standards, and stronger cyber capabilities to close security gaps and improve resilience.
April 27, 2026|Reports & Briefings
Improving State and Local Government Cybersecurity
State and local governments face rising cybersecurity risks that strain budgets, disrupt services, and erode public trust. Governments need targeted investments in modern infrastructure, continuous monitoring, and stronger third-party risk management to protect critical services.
April 27, 2026|Reports & Briefings
From Sovereignty to Control: A Clear-Eyed View of Canadian Cloud Policy
Canada’s cloud debate is asking the wrong question—control, not domestic ownership or server location, is what determines security and resilience in practice.
