SBA should develop a low-cost, vendor-neutral certification program for small business employees who serve as their companies’ designated cybersecurity experts.

To Do: Establish a Program for Part-Time Cyber Professionals

SBA should establish a cybersecurity cooperative to create a large pool of willing buyers for various cybersecurity products and services, including cyber risk insurance.

To Do: Form a Small Business Cybersecurity Co-op

The FTC should use the ruling in LabMD v. FTC as an opportunity to recalibrate its strategy for promoting strong cybersecurity practices among businesses, Daniel Castro writes in Morning Consult.

LabMD Ruling Gives FTC Chance for Course Correction on Cybersecurity

The White House should issue an addendum to the National Cybersecurity Strategy outlining its vision, and the steps it plans to take, to use AI to improve cyber resilience.

To Do: Enumerate Plans to Use AI to Improve Cyber Resilience

Daniel Castro contributed a chapter titled “U.S. Federal Cybersecurity Policy” in the book "Cybersecurity: Public Sector Threats and Responses."

Cybersecurity: Public Sector Threats and Responses

Daniel Castro writes in The Hill that a relatively simple step that Congress could take to jump-start cybersecurity in the fledgling Internet of Things is to require companies to publish a security policy.

How Congress Can Fix ‘Internet of Things’ Security

How Congress Can Fix 'Internet of Things' Security

Cybersecurity legislation should emphasize strong partnerships with the private sector and effective international coordination to respond to online attacks.

Understanding the 4th of July Cyber Attacks

The draft Cyber Resilience Act is too broad in scope and needs clearer definitions. The legislation’s fundamental pitfalls will burden businesses with compliance and undermine avenues for innovation like open source software. With targeted changes, the Cyber Resilience Act can promote better cybersecurity in the internal market without hurting competition and innovation across Europe.

Feedback to the European Commission on the Draft Cyber Resilience Act

Understanding the facts on sharing information is critical as Congress gets down to business on cybersecurity legislation.

To Do: Create a Cyber Boot Camp for Small Businesses

Recommendation

Details

Editors’ Recommendations

Testimony to the U.S. Senate on Preparing Small Business for Cybersecurity Success

Related

To Do: Establish a Program for Part-Time Cyber Professionals

To Do: Form a Small Business Cybersecurity Co-op

LabMD Ruling Gives FTC Chance for Course Correction on Cybersecurity