Center for Internet Security offers definition for often ambiguous standards on ‘reasonable’ cyber efforts

The Center for Internet Security is offering organizations guidance on how to meet the standard of “reasonable cybersecurity” that state laws and court cases suggest should be the measuring stick for cyber efforts without spelling out what that means in practice.

“Several prominent data breaches, court cases, and state data privacy laws have placed the concept of ‘reasonable’ cybersecurity in the public discourse, but there has been no real definition of what ‘reasonable’ cybersecurity is…until now,” CIS said in a...