As cyber regulation advances, ISA’s Clinton presses message to delineate government-industry responsibilities, economics

Cybersecurity regulatory moves are afoot in both Congress and the executive branch, and Internet Security Alliance president Larry Clinton is urging policymakers to base their actions on risk management principles and an understanding that government and industry appropriately make different calculations in deciding on cybersecurity investments.

“Industry clearly has a responsibility to provide a legitimate level of commercial security. If, for national security reasons in the internet context, security needs to be provided above the commercial level, then it becomes...