Penalties versus incentives discussed as part of international norms for cybersecurity

The international community appears to be moving toward a system of “penalties” and regulations rather than market-based incentives for adopting cybersecurity practices, according to a former White House official.

The topic was part of a broader discussion on international policy in cyberspace hosted by Georgetown University on Tuesday where speakers seemed to agree on the transitional nature of data security policy, with a focus on the near-term and long-term goals toward globally accepted practices.

“We've moved toward penalty,” warned Melissa...