For the first time, cybersecurity strategy is an integral part of the platforms for the US presidential candidates. Today, data breaches and cyber attacks are no longer just one offs but seemingly happen daily and impact both the private sector and government. What are we doing to minimize these data breaches and counter cyber attacks? What’s the role of government in fighting cyber crime? Where does the public sector fit in the cyber-crime puzzle? Cybersecurity experts Dan Lohrmann, Scott Schober, Shahid Shah, Eric Vanderburg and Morgan Wright address these questions.

1. Expertopinion
onmanaging
databreaches

2. Whatisgovernment's
roleinfightingcyber
crime?
What'stheroleofthe
privatesectorinfighting
cybercrime?

3. ScottN.Schober
Intelligentinformationleadstoactionableitemsforlaw
enforcement,andbothpublicandprivatesectorsplaya
keyroleinsharingthatinformation.Ioftenlikencyber
crimedatacluestoalargejigsawpuzzle.Everytimea
smallpieceisadded,thelargerpicturebecomesalittle
clearer.Governmentneedstofillinthemissing
piecesbysharingcyber-crimeinformation
withtwiththepublicsectorwhenrelevant,ortheycannot
expectthepublictoreciprocateandshareinformation
backtothem.Sharingentailsinvestigationinformation,
technicalprevention,protectivemeasuresandbest
practicesforallindividualsatrisk.
CybersecurityexpertandpresidentandCEO,
BerkeleyVaritronicsSystems,Inc.

4. ShahidShah
CEO,NetspectiveCommunications,andcybersecurity
andriskmanagementconsultant
Thegovernment’sroleistohelpineducating,galvanizing
thebestandbrightestandestablishingtheecosystemto
helpdeploycyber-crimefighters.Thegovernment
cannotandshouldnotbeseenashavingthe
resources,butitmustleadincreating,managing
andhelpingdeploythebodyofknowledgenecessary
ttofightcybercrime.Theprivatesectorneedstobuildthe
ecosystemsofimplementersandcrimefightersthatfollow
theknowledgebuiltbythecommunityandgalvanizedby
thegovernment.

5. MorganWright
Principalandowner,MorganWrightLLC,
andcyber-terrorismandcyber-crimeanalyst
Thegovernmenthastheabilitytosetpolicy:
policieson...intelligenceandprotectionofprivate
sectorcompaniesinsharingsimilarinformation,standards,
collaboration,acquisitionandsimilaractivities.It’snotjust
aboutbuildinghigherwallsandbetterdefenses.Ultimately,
theprivatesectorwillservetheirinterests,whichisasit
shouldbe.Theprivatesectorshouldneverberequiredto
seservetheabsoluteinterestsofgovernment,butshould
collaboratetoseewheremutualinterestsareand
focusthere.

6. EricVanderburg
Securityandtechnologyleader
Thegovernment’sroleisinbringingcyber
criminalstojusticeandtoprovidealegalframework
inwhichthosewhohavebeendamagedbecauseofa
lackofsecuritycontrolscanrecoverlosses.Theprivate
sector’sroleistoimplementreasonablesecuritycontrols
andresponsiblesecuritypracticestosafeguard
organizationalandcustomerdata.

7. Shouldtheprivate
sectorbemandatedto
shareinformationon
breachesimmediately?
Whyorwhynot?

8. ScottN.Schober
CybersecurityexpertandpresidentandCEO,
BerkeleyVaritronicsSystems,Inc.
Theprivatesectorshouldvoluntarilyshare
informationspecificallyrelatedtovulnerabilities
andcyberthreats.Whenitcomestobreaches,timeisofthe
essence,sotheyshouldalsobemandatedbylawtoshareinforma-
tionimmediatelywherenecessary.Thismandateincludesthetargets
oftheattack,thenatureofthedatabreachedandstepstoshoreup
security.Companiesarereluctanttosharetheirbreachesand
securityshortcomingsforfeartheircustomersmightleaveorfile
lawsuitsagainstthem.Theyalsofearthemarketreactionfrom
shshareholders.Regardless,thesepainfulbutnecessarypost-breach
stepsbuildresiliencetofutureattacks.Mycompanyfacedtargeted
attacksandhacksthatIinitiallywasreluctanttoshare.Iwasunderno
pressuretorevealembarrassingdetails,butIrealizedmymisfortunes
couldeducateandpreventothersfromgoingthroughthesameplight
soIwroteabookaboutit.

9. ShahidShah
CEO,NetspectiveCommunications,andcybersecurity
andriskmanagementconsultant
Yes,thereisagoodcasetobemadethatinformation
sharingonbreachesshouldbeshared–and
evenmademandatory–becausebreaches
areoften“contagious.”Justlikehumanandanimal
viruses,contagioncannotbehiddenlegallyandmustbe
sharedthroughtheCentersforDiseaseControl(CDC).
IthinkthIthinkthattheprivatesectorshouldberequired,for
certainkindsofbreachesbutnotnecessarilyall,to
shareinformationthroughacyberCDC.

10. MorganWright
Principalandowner,MorganWrightLLC,
andcyber-terrorismandcyber-crimeanalyst

11. EricVanderburg
Securityandtechnologyleader
Notificationsalonedolittlemorethanhurtshareholder
value.Cybersecurityproblemscan’tberegulatedinthe
samewayascarbonemissions.Informationshould
besharedonanongoingbasis,notonlywhen
thereisabreach.Inthisway,anomaliescanbe
ddetectedwhileattacksarestillbeingimplementedinstead
ofaftertheyhavebeensuccessfullydeployed.Already,
manycompaniesareutilizingcloud-basedsolutionsthat
aggregatethedatafrommanycustomerstoimprove
securityforall.Thesearethetypesofsolutionswe
needmoreof,fortheyidentifyenemiesratherthan
casualties.

12. Wantto
hearmore?
Visit
ibm.co/cyberthreatanalysis
©CopyrightIBMCorporation2016.IBM,theIBMlogoandibm.comaretrademarksofInternationalBusiness
MachinesCorp.,registeredinmanyjurisdictionsworldwide.Otherproductandservicenamesmightbe
trademarksofIBMorothercompanies.AcurrentlistofIBMtrademarksisavailableontheWebat“Copyright
andtrademarkinformation”atwww.ibm.com/legal/copytrade.shtml.