The new National Cybersecurity Strategy was released by the White House in early March, and the potential future impacts are slowly being identified, according to an article in Harvard Business Review. Looking to move from voluntary compliance to a more formalized regulatory framework, the strategy is expected to have significant effects on the private sector, in an attempt to ensure better protection of people’s personal data and to minimize the damaging effects of ransomware, phishing, and other cyberattacks.
With respect to this new approach, three key items have been noted to which businesses will want to pay attention:
They will need to be proactive about understanding and documenting the threats they face, including the vetting of their third-party suppliers and vendors for risks against their supply chains
They will then need to address identified vulnerabilities, via various preventative measures, including the expected availability of public-private collaboration via information sharing around cybersecurity threats
They’ll need to consider the differing strategies that may apply based on both the industry in which they’re involved, and the size of their organizations, as these can both affect the nature and frequency of threats.
Source:
https://hbr.org/2023/04/what-business-needs-to-know-about-the-new-u-s-cybersecurity-strategy
