CISA official evangelizes risk-based approach to technology modernization efforts

In describing how the government and private sector can modernize their operations, a leading CISA official described a tension between goals of efficiency and security, highlighting the inherently subjective nature of the risk-based approach policy makers have embraced.

“I think in some cases, and this happens in government, you get a bit more of a checklist approach,” said Jeanette Manfra, assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency. “We want a risk-based approach, and with technology that...