David Kertai
David Kertai is a research assistant specializing in cybersecurity at ITIF. He holds a B.A. in European studies and French from the University of Washington and a Master of Arts in Security Policy Studies from George Washington University.
Research Areas
Recent Publications
Getting AI’s Workforce Impact Right Starts With Better Data
Debate over AI’s workforce impact focuses too narrowly on whether it creates or eliminates jobs. Rather than impose new reporting requirements on businesses, policymakers should commission studies and expand existing surveys to capture how AI transforms work, not just changes in headcount.
Tracking Pax Silica’s Evolution: A Timeline
Major agreements, new participants, and key diplomatic and industrial milestones in the U.S.-led Pax Silica initiative, which aims to secure global supply chains that underpin AI and other advanced technologies.
Universities Must Rethink AI Education for the AI Economy
As employers increasingly seek workers who can apply AI alongside domain expertise, universities should integrate AI across disciplines—not just standalone AI or computer science programs—to prepare graduates for the modern workforce.
Congress Can Strengthen State and Local Cybersecurity in One Bill
Rather than creating a new funding program for the Multi-State Information Sharing and Analysis Center, Congress should incorporate its funding into the reauthorization of the State and Local Cybersecurity Grant Program. This approach would preserve critical cybersecurity services while improving coordination between the Cybersecurity and Infrastructure Security Agency and the Center for Internet Security.
The Cities Getting AI Right Are Investing in Workforce Upskilling
Cities that are successfully scaling AI are investing in workforce upskilling alongside governance and technology deployment. Case studies from Washington, DC, San Jose, Seattle, and Cleveland show that employee training and AI literacy are critical to turning pilot projects into lasting improvements in public service delivery.
Modernizing the National Vulnerability Database for Growing Cyber Risks
The National Vulnerability Database is struggling with growing backlogs, outdated processes, and overlapping responsibilities that threaten its effectiveness. NIST should improve coordination with CISA, modernize vulnerability management systems, and strengthen stakeholder engagement to restore trust and efficiency.
States Should Move AI Pilot Programs from Siloed Tests to Statewide Deployment
Five states—Utah, Connecticut, Ohio, Texas, and North Carolina—are showing how centralized AI sandboxes, oversight frameworks, and clear evaluation metrics can help governments move beyond isolated pilot programs and scale AI tools to deliver measurable improvements in public services.
Adapting CyberCorps SFS to AI Threats Is Key for the Future of Cybersecurity
As AI-powered cyber threats become more advanced, the federal government should modernize the CyberCorps SFS program by integrating AI-security training, reforming cyber hiring pipelines, and expanding training infrastructure to build a stronger cybersecurity workforce.
States Should Learn From Each Other to Close Cybersecurity Gaps
Cyberattacks are rising across state and local governments, and the blog recommends that all states adopt coordinated strategies, clear standards, and stronger cyber capabilities to close security gaps and improve resilience.
Improving State and Local Government Cybersecurity
State and local governments face rising cybersecurity risks that strain budgets, disrupt services, and erode public trust. Governments need targeted investments in modern infrastructure, continuous monitoring, and stronger third-party risk management to protect critical services.
Federal Government Should Partner With Frontier AI Labs on Cybersecurity Defense
While the U.S. has focused on securing AI systems themselves, it must urgently shift toward using AI defensively—through coordinated government, industry, and infrastructure efforts—to counter the growing threat of AI-powered cyberattacks on existing systems.
Health Care Is Getting a Cybersecurity Upgrade—Other Sectors Should Too
Cyberattacks on critical infrastructure—particularly health care—are escalating, and Congress should pass the Health Care Cybersecurity and Resiliency Act and expand similar sector-specific cybersecurity programs across all critical infrastructure sectors to provide tailored funding, guidance, and support.

