09/09/2016	

Input	to the Commission on Enhancing NaRonal Cybersecurity

CFF Founding Trustees Board of Directors, Cyber Future FoundaRon

1	 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	

2	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Future of Cyber What are WE Aspiring and How do WE Achieve

our Goals	in	Cyber in	the Next	Decade?

Cyber Future –	Why Digital Pivots on Cyber CFF	

Point	of Cyber transcends Digital in creaRng value

View on	 Areas of focus for Cyber at	NaRonal and Global Level

Future Focus on naRonal cyber interest	current	and future state

AddiRonal macro cyber areas to consider Cyber

CFF’s role in building the future of cyber

of	

2	 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

		

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 		

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	

		

3	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

ExecuRve LeTer to the Commission on Enhancing NaRonal

Cybersecurity

The Honorable Chairman & Commissioners,

Commission on Enhancing NaRonal Cybersecurity

It	is our honor and privilege to submit	our response to the request	for informaRon regarding cybersecurity as a	maTer of naRonal interest, and hope that	it	will add to the collecRve

inputs towards formulaRng robust	cybersecurity policies and pracRces at	every level of the naRon’s digital economy.

At	CFF we believe that	as a	human race we will conRnue to thrive not	only our physical abode, which is earth, that	we occupy, but	it	will exert	itself to greater aspiraRons in the virtual

domain, that	is cyberspace. While our physical limitaRons may be a	hindrance to our individual aspiraRon, human mind and its unfathomable psyche can achieve and aTain feats that	

are limitless. When working in harmony with other creaRve beings, the human race with access to cyberspace, as defined by the Rme and talent	of those engaged, can and will take

the enRre mankind to greater heights (or deeper abyss, depending on how the resources and faculRes are used).

We believe every individual in this planet	should have the opportunity to have access to the digital resources in the cyberspace and use it	collaboraRvely for the greater good of

mankind. And it	is our prerogaRve as the leader of idea	and innovaRon, to ensure safe and secure online access to the cyberspace.

We believe the best	way to achieve these goals is to encourage iniRaRves by promoRng greater access to the cyberspace; to promote collaboraRon among the commercial,

government	and academic sectors engaged in digital commerce and cyber infrastructure building; and to ensure parRcipaRon by ciRzens of the world from diverse communiRes and

all levels of society. In our experience, such collaboraRve and collecRve pursuit	help build common ethos, achieve excellence (in their common goals), enable people to apply

themselves to a	greater good and use the digital and cyber assets for the naRon and in general –	to the beTerment	of mankind and society.

This is a	condensed version of our point	of view only addressing areas of focus from the commission, for updated and more comprehensive point	of view with global and macro areas

of focus, the honorable Commission and public are encouraged to visit	www.cyberfuturefoundaRon.org periodically.

Yours	Sincerely,

Val Mukherjee, CISSP, CRISC

Chairman, Cyber Future FoundaRon

www.cyberfuturefoundaRon.org

3	 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 		 	

	 	 	 4	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

The	Challenge	facing	us	and	what	problem do	we need	to	Solve for
 

our Community	and	the Greater World	... The Cyber-Digital	Divide
 

Cyber threats and challenges

are looming in today’s Digital

Age!	Yes ...	Looming ...

We cannot	stop complaining about
 

Cyber on the other hand cannot	
 

Stop FascinaFng about Digital!	
 

Cyber

Digital cannot exist without the
 

connectedness of cyber.	Digital in IsolaRon
 

makes DigiRzaRon of assets completely irrelevant.
 

Digital

Two Sides of the same Coin –	Yes ...	Even	BitCoin!*	

© 2016 Cyber Future FoundaRon *IMAGE: FLICKR, ANTANA 4	
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	

	 	

	 	 	

	 		

	 	 	 		 	

	 	 	

	 	

	 	 	 	 	 	

	 	

	 	 	 	

	 	

	 	

	 	

5	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

How Awesome is Cyber! >>	Future Forward Cyberspace ...	Consider	

‘How	we Got	to	Now*’	in	a	Decade ...	2025!

From Individual Personal

Health Data	

To Demographic Health

PaTerns and InformaRon

From Infinitesimally Small To Infinitely Large
 

Quantum CompuRng String Theory
 

From Smart	Homes

for families

To Smart	CiRes for

CiRzens

From Individual Regional
 

Cyber Efforts
 

Global Trusted

Cyber Future

PlaQorm

To an integrated Global
 

CollaboraRve PlaQorm
 
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	

	 	

	 	

	 	 	

	 	 	 	 	 	 	 	

	 	

	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	

6	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

The idenRfied CriRcal areas of Focus for Cyber, we see them as

individually significant, and collecRvely paramount	

CriRcal Cybersecurity Cybersecurity Cybersecurity Federal Infrastructure Research & IdenFfied	 Insurance Workforce	 Governance Cybersecurity Development	 Areas of
 

NaFonal	
 IdenRty and Public	 State & Local InternaRonal Internet	of Interest	 Access Awareness & Government	 Markets Things	 Management	 EducaRon Cybersecurity

Some
 

AddiFonal
 

Macro
 

Cyber Peace Cyber Resilience Cyber Trusted Cyber	Crime &	 Cyber Warfare

Ecosystem Terrorism and Deterrence

Areas of These and many more addiRonal nuances of cyber and the future digital economy needs to be

considered and addressed while developing policies, frameworks, guidance for markets and Interest	 overall direcRons for a	digital economy of the future moving at	the speed of cyber

6	 © 2016 Cyber Future FoundaRon
	 	 	 	 	

	 	 	 	 	 	 	 	 	

7	 © 2016 Cyber Future FoundaRon

Areas of IdenRfied Cyber Issues Now and in Future
 
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	

	 	 	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	

	 	 		

	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

		

	 	 	

	 	 	 	

	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	

	 	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	

	 	 	

8	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

CriRcal Infrastructure Cybersecurity is fundamental to our lives as

individuals and of paramount	importance to naRonal security

Current	State Future State

• The current	state of cyber criRcal • The future of criRcal infrastructure cybersecurity infrastructure including such sectors as requires a	concerted effort	and substanRal Energy, Water, TransportaRon, Financial redesigning of digital components to ensure that	 Services and others have received some they can keep up with the dynamic nature of a	 tacRcal support	from the Government	 connected cyberspace and private sector • Some areas such as financial sector is poised to go • Most	of these criRcal infrastructure through a	significant	change and possible components, especially power and disrupRon due to emergence of new digital uRliRes are based on age old economic infrastructure, especially digital technologies that	have not	been

currency and block chain technology refreshed due to the nature of their • Sectors such as Power and URliRes need to inherent	architecture rethink and reshape their cyber capabiliRes as • Government	sponsored Volunteer efforts they get	integrated into the consumerizaRon and and regulatory enforcement	have picked connectedness

up steam lately, but	not	adequately

CriRcal
 

Infrastructure
 

Cybersecurity
 

Needs

immediate

technology

refresh

PrioriRzed Risk

Based

Approach

With an eye

towards a	

connected

future

8	 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 		

	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	

	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

		

	 	

	 	 	 	 	 	

		

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

9	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Cybersecurity insurance is meant	to provide an opRon to miRgate

losses from a	mulRtude of cyber ‘casualRes’ and incidents

Cybersecurity
 

Insurance
 

Needs Cyber	

Actuarial

Risk Based

Assessment	

PreventaRve

Approach for

Cyber

Current	State Future State

•	 Cyber insurance is evolving as a	mainstream

risk miRgaRon component	for enterprises

•	 Cyber insurance is not	a	very mature space

as of now and needs a	lot	of staRsRcal and

actuarial data	to support	the determinaRon

of coverage & claims

•	 Cyber insurance as an industry in itself is

learning through course correcRons,

however many major players are present	to

provide significant	direcRon

•	 SRll a	standalone offering amongst	other

general areas of liability and casualty

insurance

•	 Awareness and educaRon from focus groups

is helping steady advance in this domain

•	 A strong Cyberinsurance industry will promote the

adopRon of mature cyber pracRces and cyber hygiene

leading to reduced risk of cyber casualRes

•	 Cyber insurance providers will add on incenRves for

the mature pracRces

•	 Cyber insurance will develop cyber actuarial which will

be driven by the type of incident	and available

recourse	

•	 Cyber insurance will also need to have support	from

policies that	provide safeguards around data	

protecRon and privacy, while allowing for cyber

intelligence sharing

•	 A strong Risk Management	framework which is akin to

financial/business risk will drive the adopRon of cyber

insurance as we look forward to the future

9	 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 		

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

10 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

–	

For Cybersecurity Research and Development	entrepreneurship and

innovaRon is today’s mainstay, future needs to be more thorough

Current	State Future State

•	 Cyber Research & Development	is an up and • A concerted iniRaRve, both in academia	and industry

coming topic and not	yet	the mainstay of over cybersecurity research and development	needs to

innovaRon be established

• InnovaRon is currently fueled by an • Academia	and industry should collaborate in R&D

entrepreneurial spirit	of addressing specific efforts which would provide the academic incenRve in

problems with widgets, and not	 making cybersecurity a	mainstream area	of research

comprehensive, fact/research based efforts • Academic research should be supported by industry

• There is a	disRnct	gap in thorough academic orientaRon both in terms of hands of industry

research supported by diligent	study of facts experience as well as the pracRcal applicaRon of

and figures developed product	to enterprise scale

•	 Larger organizaRons are adopRng some R&D • Students and Researchers should be incenRvized to

iniRaRves, but	the budget, effort	and aTenRon provide focused aTenRon to cyber challenges not	only

is usually directed towards the current	 in technology but	across the board including but	not	

operaRonal needs –	firefighRng mode is a	huge limited to cyber economy, cyber governance, cyber

distracRon for sustained innovaRon policy, even cyber doctrines for military usage

Cybersecurity
 

Research &
 

Development	
 

Significant	

investment	is

required

InnovaRon

supported by

Thorough	

Research

More publicprivateacademic

collaboraRon

10 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	

	 	

	 	

	 	

		

	 	 	 	 	 	

	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	

	 	

	 	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 		

11 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

- -

With demand far outpacing supply, it	is essenRal that	we invest	at	

every level in developing the cyberworkforce of the future

Current	State Future State

•	 Every sector of naRonal economy is being

challenged by cyber issues, and there is not	

enough people to serve the needs

Cybersecurity
 

Workforce	
 

Cyber

specialists

need to be

well	rounded

Not	Just	

technology

but	business

SMEs needed

Need both

academic and

vocaRonal

curriculum		

•	 Cyber iniRaRves for workforce development	should be

developed with public private academic collaboraRon

•	 Government	needs to issue fact	based guidance

•	 The academic output	supporRng cyber providing macro level economic requirement	and

requirements for the job market	is next	to support	academic pursuits for cyber educaRon

negligible if not	nothing •	 Government	iniRaRves should be supported by

•	 Cyberworkforce is too IT focused right	now, business to accelerate the Rme to value and

and needs to be more thoroughly groomed producRvity through apprenRceships

with knowledge of business and risk •	 Cyber curriculum should be included in the basic

•	 Cyber also needs super specialized STEM/STEAM	programs with balanced and well

technologists who are well versed: trained	 rounded focus on the needs of a	connected cyber

and cerRfied	 future

•	 Areas requiring financial skills, risk • Structured academic cyber curriculum needs to be

management	or security clearance in federal supported by vocaRonal studies supported by private

& criRcal infrastructure protecRon roles are industry which provides direct	and Rmely supply of

even harder to fill cyber workforce to the industry

11 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 		 	 	 	 	 	

	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	

	 	

	 	

	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 		

	 	

	 	 	 	 	 	

12 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

t	

Federal Governance needs to consider cyber as a	strategic as well as

operaRonal component, and also needs to adjust	to the dynamics

Current	State Future State

•	 Government	infrastructure is equally if not	

more vulnerable, as demonstrated by series

of breaches and disclosures

•	 Federal government	has a	steep slope to

Federal
 

Governance
 

Cyber

resiliency	is of

great	

importance

Cyber

maturity

higher than

ever	before	

Cyber

governance

need to be at	

speed	of	cyber

•	 Federal Government	will be expected keep up with the

pace of digital disrupRon, both economy as well as

societal changes, this needs to be supported by a	

strong cyber governance process

climb in terms of infrastructure updates •	 Cyber governance has to have steady execuRve and

legislaRve support	in terms of policies and operaRonal

adjusted to evolve quickly to address current	 technologies, and refresh at	a	rate commensurate with

fundamental rights, privacy and security as i	 execuRon

relates to the state (federal security)

•	 There is a	need to balance ciRzen’s

•	 Governance process needs to include idenRficaRon of

• digital trends, procurement	of capabiliRes necessary, 	 Cyber governance currently is quite archaic

operaRonalizaRon of adequate measures, including

needs	 the changes in a	dynamic cyber world

and Rme consuming processes needs to be

•	 There are iniRaRves by the federal • Technological innovaRon and adopRon should be a	

government	to quickly idenRfy innovaRve part	of the governance process, supported by a	risk

soluRon and onboard them to federal based decision making process

plaQorms, this process needs to enter • Cybersecurity oversight	and accountability must	be

mainstream federal procurement	process ingrained into the leadership at	every level

12 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	

	 	 	 	 	

	 	 	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 	

	 	 	

	 	 	

	 	

	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

	 	 	 	 	

	 	

	 	 	 	 	 	 	 	 	

	 	 	 		

13 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

-

IdenRty –	both of human and devices is key towards security and
 

accountability of access, needs to be established and manifested
 

Current	State Future State

• IdenRRes of human, devices and autonomous things • IdenRty has been established as the new that	are connected to the cyberspace needs to be

perimeter of the corporate as well as addressed in their respecRve context	

consumer domains are struggling with • Safe cyber hygiene needs to be promoted across

protecRng idenRty data	 consumers and organizaRonal end users as the • Governance around corporate idenRty has boundaries between the two disappear

many challenges –	both operaRonal • IdenRty management	should be supported by acRvity

processes and technological and context, through analyRcal intelligence support	 • There is a	need for a	fundamental refresh in • The concept	of trusted idenRRes need to be developed idenRty protecRon mechanisms –	such as and supported by technological innovaRon to ensure

moving away from single factor knowledge they ease of use is supported by definiRve security based authenRcaRon mechanisms controls and measures • There is also an increase in the scale and • IdenRRes should be monitored for acRviRes, but	with

variety of consumer idenRty which needs to due care for privacy concerns

be addressed in ways that	are • IdenRty management	should embrace at	least	a	mulR

commensurate with the needs of the future factor approach and supported by some form of digital

consumer and individual cerRficate and physical associaRon

IdenRty and
 

Access
 

Management	
 

IdenRty is the

new	cyber

perimeter

Both device as

well as human

idenRty

counts

Strong

governance of

idenRty &

access is a	

must	

13 © 2016 Cyber Future FoundaRon
	 	

	 	

	 	 	 	 	 	 	 	

	 	 	 	 	

	 	 	

	 	 	

	 	 	 	 	

	 	 	 	

	 	 	

	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	

	 	

	 	

	 	

		 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	

InternaRonal
 

Markets
 

Cyber supply

chain is as

criRcal as

physical

InternaRonal

data	laws and

regulaRons

are essenRal

Economic	&	

societal

benefits are

immense

Current	State Future State

• Chances are that	the cyberspace will remain open and
 

in and ouQlows boundariless are high in the next	decade, which will

•	 The current	economy led by US global lead to conRnued increase in cross border economic

conglomerates and business houses acRvity through cyber

dominate InternaRonal markets and
 •	 Access to internaRonal markets will provide unlimited

cyberspace provides unfeTered access
 opportuniRes, but	definitely potenRal for many

•	 Most	of the cyber space being open and challenges of goods and services that	are not	welcome

boundary-less provides for free flow of •	 RegulaRng the cyberspace to provide safe and secure

knowledge	 access to internaRonal markets will be necessary to

•	 However this also exposes the US businesses support	the digital economy of the future

to the threats looming in the cyberspace –	

this pain is accentuated by cyber data	breach

and espionage acRviRes, including theB of

intellectual property from US businesses

•	 The current	state of internaRonal market	

manifests itself in both flow of goods and

knowledge, and it	is supported by

tremendous economic and societal/cultural

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 		

14 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Cyberspace so far has no boundaries and is expected to remain so

leading to unfeTered access into the internaRonal markets

14 © 2016 Cyber Future FoundaRon
	 	

	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	

	 	

	 	

	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 		

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	

-

-

Current	State Future State

•	 IoT evoluRon has been very rapid with an

incredible amount	of devices already

connected to the ecosystem, generaRng an

Internet	of
 

Things	
 

Incredible

amount	of

devices to be

connected

Incredible

amount	of

data	already

generated

Needs new	

architectures

and paradigms

of scale

•	 IoT and the OT will conRnue to include a	mulRtude of

devices, which will result	in device device as well as

human device interacRon, conRnuing to generate an

incredible amount	of data	

•	 The data	generated has to be resolved for various data	 incredible amount	of data	

•	 This is hardly addressed by the current	 sensiRviRes, regulaRons and privacy mandates, this is

an area	which IoT is extremely challenged at	this point	

enterprise and consumer cyberspace is used • Future of IoT will also need the devices to be secure by

to and able to manage

standards and frames of reference that	the

design, leading to an overall secure IoT

•	 IoT disrupts the current	model of cyber by •	 We except	the agility and flexibility of cloud services

both at	infrastructure and soBware powering growth

shadowing the human connected network • IoT will form an ecosystem as well as data	plaQorm to

and the legacy controls are not	applicable	 fuel the intelligence and informaRon in cyberspace

there	 • As maturity in IoT grows the vulnerabiliRes will reduce

establishing a	parallel device network

•	 IoT also provides an incredible opportunity but	iniRally it	will be plagued with the same set	of

aid the digital commerce problems we have in the internet	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

15 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Internet	of Things is at	its infancy and already generaRng more data	

than we have ever done in the history of mankind

15 © 2016 Cyber Future FoundaRon
	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	

	 	 	 	

	 	

	 	 	 	 	 	 	 	 	

	 	 	 	

	 	

	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

Current	State Future State

•	 Cyber awareness and educaRon is going to

•	 Consumers are usually leB to their • General awareness aided by focused public

own device in addressing cyber campaigns of safe cyber pracRces will

•	 Very liTle knowledge currently be key to safe journey into and through to

exists in the public realm the cyber economy of the future

ensure general public is not	led to dangers

that	can be avoided

challenges

•	 Cyber educaRon is fundamental

but	not	addressed in the public •	 Enhanced safety for children and young

educaRon medium adults for countering cyber exploitaRon

•	 Cyber is seen as an evil and the bias and overexposure needs to be built	in

leads to a	negaRve aUtude	 • Both academic and public campaigns need

towards it	overall to be supported by public-private

partnership

Public	
 

Awareness &
 

EducaRon
 

Good	cyber	

hygien

Care for

personal data	

Knowledge	of

cyber	good

and bad

desRnaRon

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

16 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Public awareness and educaRon is criRcal, however strong technical

controls are –	human element	is what	serves as the weakest	link

16 © 2016 Cyber Future FoundaRon
	 	 	

	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	

	 	 	

	 	

	 	

	 	

	 	 	

	 	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

Current	State Future State

• State and local governments will be more • State and local governments have a	 connected than ever before

number of digital iniRaRves which • Government	services will be made

seem to be operaRng on older available more and more through the

infrastructure as well as cyber/digital medium

architectural paradigms not	safe • State and local governments could be

for a	connected cyber economy custodians of digital idenRRes due to • Safety and privacy of ciRzens is capabiliRes for posiRve physical usually a	state issue and needs to verificaRon

be addressed along with providing • IniRaRves such as connected digital ciRes

access to government	 will provide significant	impetus to the

infrastructure and services cyber economy of the future

State & Local

Government	

Cybersecurity

Connected

and Accessible

Government	

eGovernment

enabled by

cyber	

presence

Ensuring local

and state law

enforcement	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

17 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

State and Local Government	will play an inevitably significant	part	in

the cyberspace through public-private and individual interacRon

17 © 2016 Cyber Future FoundaRon
	 	 	 	 	

	 	 	 	 	 	 	 	 	

18 © 2016 Cyber Future FoundaRon

How CFF is Addressing the Cyber Needs of Future
 
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

		 		 		 		

	 	

	 	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	 	

	 	 	

	 	

	 	

	 	

	 	

	 	 	

	 	 	

	 	 	

	 	 	

	 	 	

	 	 	 	 	

	 	

	 	 	

	 	 	

	 	 	 	 	

	 	 	

	 	 	

	 	 	

	 	 	

		 	

		

	 	

	 	

19 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

To Build a lasFng Monument, you have to build an everlasFng

FoundaFon ...	Building Global	Trusted	Cyberspace,	a	step	at	a	Fme

Build	Cyber	

Global

Leadership

PlaQorm

Build	Cyber		

Global

ConsRtuency

PlaQorm

Build	Cyber		

Global

Community

PlaQorm

Build	Cyber	

Global

CollaboraRon

PlaQorm

2016	 2017	 2018	 2019	 2020	

Global Trusted

Cyber Future

PlaQorm

•The ConsRtuencies •The Cyber Global •The	Core •The	communiRes	will	 •Build core	 will address the CollaboraRon plaQorm will Leadership Group integrate their work leadership needs of their be dedicated to global acRon will take upon products, acRon plans, Team and respecRve	 for leveraging across developing their outcomes into a	global engagement	 communiRes and commercial, public, and

respecRve	 collaboraRon plaQorm of plaQorm develop a	global community sectors towards

consRtuency trusted cyber enRRes at	 leading to community of trusted cyber commerce,

groups within an individual as well as global acRon trusted cyber communicaRon, and

CDA, CPI	& CTI	 machine level

19 © 2016 Cyber Future FoundaRon enRRes collaboraRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 		 	

	 	 	 	

20 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Finding Order from Chaos, and Structure from the Unstructured ...	

And the Ability to Address Change at	the Speed of Cyber

From a	Global CollecRon of Cyber Efforts from To a	CollecRve CollaboraRve Global

Various Best	in Class OrganizaRons PlaQorm of Trust	and Synergy

20 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

			

	 	 	 	 	 	

	 	 	

	 	 	

	 	

	 	 	 	

	 	 	

	 	 	

	 	

	 	 	 	

21 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Cyber is in a Big Mess ...	So	What?	Focus on the SoluFon >	Trusted

Global	CollaboraFon	PlaEorm	of	Known	EnFFes	and	IdenFFes	

Trusted

Global	Cyber	

CollaboraFon

Industry

Governments Academia	

•	 A Digital Economy needs to have a	

global plaQorm for Trusted	Global

Cyber	CollaboraFon across the triad

of	Industry,	Governments and

Academia

•	 This can be achieved through	the

organizaFon	and communiFes	of	

collaboraFon acRng as an aggregate

change	catalyst and acRon group

enabling the development	and

adopRon of Trusted Global

Cyberspace

21 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 		

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	 	 	

	 	 	

	 	 	

	 	 	 	 	 	

Create

•CFF will create the communiRes of

engagement	towards common purpose of

developing a	common framework for cyber

•CFF will create Special Interest	Groups within

its consRtuents for ideaRng cyber challenges

•CFF will create AcRon Groups and orient	

leaders, and direct	efforts towards addressing

cyber challenges idenRfied by the Cyber

Future SIGs

Connect	

•CFF will take charge as the Super Connector

of Cyber ecosystem and the CFF ConsRtuents

with the larger Cyber Ecosystem across the

globe	

•CFF will connect	Cyber, Digital and Social

plaQorms for change into a	consolidated

global framework which will support	the

cause for change in Cyber Future

•CFF will connect	global leaders commiTed for

change through the consRtuent	plaQorms

Collaborate

•CFF through its consRtuents will support	the

global collaboraRon for cyber

•CFF will collaborate to develop frameworks

for engagement, define areas of ownership

and responsibility and acRonable plan for

adopRon of those frameworks

•CFF will use the medium for leadership

development	and coaching towards

developing future leaders

Global Challenges Regional Breakup Social Sectors Economic Impact	 Human Impact	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	

22 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

We will include Create, Connect	and Collaborate our ConsRtuents

towards a	Bold Cyber Future Plan that	will represent	

22 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	

	 	 	

	 	 	 	 	 	 	 	 	 	

	 	

	 	 	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	

	 	

	 	

	 	

	 	

		

	 	

	 	

23 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Our ConsRtuent	OrganizaRons were built	with A Unique Program

Delivery Model in Mind ... We will mobilize in all areas cyber

IniRal Programs for Cyber ConsRtuents

support	the foundaRonal aspects of cyber

while demonstraRng our commitment	of

converRng thought	to acRon

Contribute to the development	of growth

of individual consRtuencies and their

adopted missions

Build Cyber Future Leadership global

PlaQorm for collaboraRon. Support	CFF

Mission, Bold and Global Alliance Programs

Establish the vision of Cyber Future, and

sponsor the development	of cyber future

framework

Cyber Future

FoundaRon

Cyber Future

Council	

Cyber	Defense

Alliance

Cyber

Commercial

Focus Programs

(3)	

Cyber Peace

IniRaRve

Cyber Peace

Focus Programs

(3)	

Cyber Trust	

InsRtute

Cyber Academic

Focus Programs

(3)	

23 © 2016 Cyber Future FoundaRon
	 	

	 	 	

	 	

	 	

	 	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	 	

		

	 	

	 	

Cyber Future

Council	

•Cyber Future Bold

Program –	Our

Flagship Program

• Aims at	making a	

global –	human

Impact	through

trusted cyber

Cyber	Defense

Alliance

•Cyber Taxonomy

IniRaRve

•Cyber Global

CollaboraRon

Framework

•Cyber Insurance

Guidance

Cyber Peace

IniRaRve

•Cyber	Public	Policy

•Cyber InternaRonal

Trusted Engagement	

•Cyber PPA Joint	Task

Force Pilot	

Cyber Trust	

InsRtute

•Cyber	Curriculum	

•Cyber Academy

•Cyber Leadership

Development	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

24 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

We Got	to do this Right	... while evolving and expanding our reach

and impact	–	we will be: Focused, Deliberate and ImpacQul

24 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	

	 	 	

	 	 	 	

	 	 	

	 	

	 	 	 	 	

	 	

25 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

The CFF OrganizaRon is built	on Inclusiveness of Human Intellect	
 

and Diversity of Thoughts ... Global Impact	needs Global Reach
 

Global Leaders from

Every	 areas	 of society	

and	sector are drawn to

build the Cyber Future

FoundaRon and its

ConsRtuents

CFF is Providing	 these

Leaders	 with	 an acFon

oriented	plaEorm to effect	

change at	the scale of Cyber

through thought	 leadership

and tangible impact	

25 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 		

	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	 	

	 	 	 	 	

26 	 	 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon 	 	

Who Which Where	 What	 When

Val Mukherjee

Val Mukherjee

Harold Collum

Val Mukherjee

Dr. Gary Lacefield

Val Mukherjee

Dave Marwell

Dr.	Yvo Desmedt

Dr. Gary Lacefield

Val Mukherjee

Cyber Future Bold Program

Cyber Taxonomy

Cyber Insurance Guidance & Framework

Cyber Global CollaboraRon Framework

Cyber	Public	Policy

Cyber InternaRonal Trusted Engagement	

Cyber Private-Public-Academia	Joint	Task Force Pilot	

Cyber	Curriculum	

Cyber Academy

Cyber Leadership Development	Program

Q4’16-Q4‘17	

Q4’16-Q3’17	

Q4’16-Q1’17	

Q2’17 –	Q4’17

Q3’16 –	Q3’17

Q4’16 –	Q4’17

Q3’16-Q1’17	

Q4’16 –Q2’17

Q4’16-Q2’17	

Q1’17-Q2’17	

CFC	

CDA

CDA

CDA

CPI	

CPI	

CPI	

CTI	

CTI	

CTI	

Global

Global

US

Global

US

Global

US-TX	

US-TX	

US

Global

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

Building an Inclusive and CollaboraRve Global PlaQorm for Cyber

towards SupporRng Global Cyber Trust	Mandate –	Top 10 Programs
	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 27 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Global	PoliFcal &	Economic	

Entrepreneurship	&	InnovaFon	

Cybersecurity	OrganizaFons	 Think	Tanks

Social	&	Humanitarian	 Standards & Academic Global	Cyber	OrganizaFons	

27 © 2016 Cyber Future FoundaRon

CFF Engaged in 2016

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

We cannot	and should not	do this Alone ... There is a	wealth of
 

knowledge, an ocean of organizaRons and an army of leaders
 
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	

	 	 	

	 	

	 	 	

	 	

	 	

	 	

	 	

	 	

	 	 	

	 	 	 	 	

Val Mukherjee
 

Founder, Chairman
 

Harold Collum
 

Founding Trustee,
 

ExecuRve Director
 

Dave Marwell
 

Founding Trustee,
 

Vice-Chairman
 

William Gordon
 

Founding Trustee,
 

General Secretary
 

Shawn Tuma
 

Founding Trustee
 

General Counsel
 

Jon Shapiro

Trustee & Director

CFF	

Rick Orloff

Board of Directors

CFC	

Dr. Gary Lacefield
 

Board of Directors
 

CPI	
 

Dan TalboT
 

Board Member
 

CDA
 

Joyce	Brocaglia
 

Board Member
 

CFF	
 

28 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Leadership Already in AcRon with a	Diverse Group of Founding

Trustees from Social, Public, Commercial, Academic Leaders

28 © 2016 Cyber Future FoundaRon
	 	 	 	 	

	 	 	 	 	 	 	 	

29 © 2016 Cyber Future FoundaRon

Sample Model of Engagement	through CFF PlaQorm SupporRng Cyber
 
	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 		

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 		

	 	 	 	 	

	 	 	

	 	 	 	

	 	 	 	 	

	 	 	

	 	 	 	

	 	 	 	 	 	

	 	 	 	

	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 	 	

	 	 	 		

30 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

Cybersecurity Insurance Project	Supported by Cyber Future

FoundaRon through the Cyber Defense Alliance IniRaRve

Insurance companies are “shooRng in the dark” when it	comes

to underwriRng standards for cyber breach insurance policies.

The Cyber Future FoundaRon has spent	considerable Rme

discussing this maTer with representaRves from some of the

largest	property & casualty insurance companies chartered or

licensed to do business in the USA. Many of these, and most	of

the larger ones, not	only operate within the USA, but	have

global operaRons, primarily in Europe, Asia	and the Pacific Rim.

The main points of consideraRon, when developing underwriRng standards that	will
 

conform to the NIST Cybersecurity Framework, are issues of:
 		

• Taxonomy,		

• Engineering standards,			

• CompeRng vendor standards that	are oBen proprietary,		

• Benchmarking acceptable vendors’ performance standards,		

• Other such technical issues.		

The Cyber Future FoundaRon has

assembled a	group of stakeholders,

including some of the largest	global

enterprises in the cyber breach

insurance underwriRng category, along

with carefully selected technology

partners that	are common to many of

these organizaRons. We have also

brought	several of the largest	

intermediaries to the table, including

third party administrators and insurance

brokerage firms, to get	their input	into

this very complex process.

30 © 2016 Cyber Future FoundaRon
	 	 	 	 	

	 	

	 	

	 	

	 	 	

	 	 	 	

31 © 2016 Cyber Future FoundaRon

Thank You

Val Mukherjee

Founder, Chairman

Cyber Future FoundaRon

www.cyberfuturefoundaRon.org

valmiki.mukherjee@cyberfuturefoundaRon.org

Ph: +1 (940) 337-6720
	 	 	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 		 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	

32 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

References and Credits
 

•	 hTp://www.dhses.ny.gov/oct/units/criRcal-infrastructure-protecRon/

•	 hTps://www.dhs.gov/ccubedvp	

• hTps://www.dhs.gov/cybersecurity-insurance

• hTp://burning-glass.com/wp-content/uploads/Cybersecurity_Jobs_Report_2015.pdf

•	 2014: A Year of Mega	Breaches, Ponemon InsRtute, 2015 (pdf)

•	 2014 Global Report	on the Cost	of Cyber Crime, Ponemon InsRtute, 2014 (pdf)

•	 The Cost	of Malware Containment, Ponemon InsRtute, 2015 (pdf)

•	 Verizon Data	Breach InvesRgaRons Report, 2013 (pdf)

•	 Global Corporate IT Security Risks: 2013, Kaspersky Lab (pdf)

•	 NCR	DisRnguished Professor of Law & Technology, University of Dayton School of Law, Dayton, Ohio USA. Email : susanwbrenner@	yahoo. com

•	 Susan W. Brenner, Toward A Criminal Law for Cyberspace : Distributed Security, 10 Boston University Journal Of Science & Technology Law 2 (2004).

•	 Brenner,	Toward A Criminal Law for Cyberspace, supra.

•	 McConnell InternaRonal, Cyber Crime . . . and Punishment	? Archaic	Laws Threaten Global InformaFon	December 2000), www.	mcconnellinternaRonal.	com/	

services/	cybercrime.	htm.	

•	 «	Cybercrime », DicRonary.com,	hTp ://dicRonary.reference.com/browse/cybercrime.	

•	 Susan W. Brenner, Is There Such a Thing as Virtual Crime ?, 4 California	Criminal Law Review 1 (2001).

•	 Brenner,	Is There Such a Thing as Virtual Crime ?, supra.

•	 18 United States Code §	2331(1).

•	 Tony Smith, Hacker Jailed for Revenge Sewage AGacks, The Register (October 31,2001), hhTp	://	www.	theregister.	co.	uk/	2001/	10/	31/	

hacker_jailed_for_revenge_sewa ge/.	

•	 Bill Wallace, Next	Major AGack Could Be Over Net, San Francisco Chronicle (November 12,2001).

•	 An Argument	for AnFcipaFng Cyber-AGacks, 2002 University of Illinois Journal of Law, Technology & Policy 1.

32 © 2016 Cyber Future FoundaRon
	 	 	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	

	 	 	

	 	 	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	 	

	 	 	 	

	 	

	 	 	 	 	 	

	 	 	 	 	 	 	 	 	 	

	 	 	 	 	 	

33 © 2016 Cyber Future FoundaRon CFF ConfidenRal –	Needs permission for distribuRon

References & Credits
 

•	 Dan Verton, Black Ice : The Invisible Threat	of Cyber-Terrorism (New York : McGraw-Hill, 2003).

•	 NaRonal Cyber Exercise : Cyber Storm, U.S. Department	of Homeland Security (June 21,2006), hTp :// www. cryptome.	org/	cyberstorm.	pdf.	

•	 California Man Pleads Guilty in “Botnet” AGack, U.S. ATorney –	Western District	of Washington (May 4,2006), hTp ://seaTle.>i.gov/dojpressrel/

2006/botneck050406.htm.

•	 Brenner & Goodman, In Defense of Cyberterrorism,	supra.

•	 Note, Responding to Terrorism	: Crime, Punishment, and War, 115 Harvard Law Review 1217,1224 (2002).

•	 18 U.S. Code §	2332b.

•	 “DefiniRon of terrorism,” Wikipedia, hTp ://en.wikipedia.org/wiki/DefiniRon_of_terrorism.	

•	 “Terrorism,” Wikipedia, hTp ://en.wikipedia.org/wiki/Terrorism.	

•	 Cyberspace as a Domain in which the Air Force Flies and Fights,	U.S.	Air	Force	(November	2,2006),	hTp	://	www.	af. mil/ library/ speeches/ speech.

asp ? id=	283.

•	 Steven A. Hildreth,	Cyberwarfare, Congressional Research Service (June 19,2001), hTp :// www. fas.	org/	irp/	crs/ RL30735. pdf.	

•	 Bill Gertz,	Chinese InformaFon Warfare Threatens Taiwan, Washington Times (October 13,2004).

•	 Gertz,	Chinese InformaFon Warfare, supra.

•	 Dimitrios Delibasis,	State Use of Force in Cyberspace for Self-Defense, 8 Peace Conflict	and Development	1 (2006).

•	 lan Sipress,	Computer System	Under AGack, Washington Post	(October 6,2006), hTp :// www. washingtonpost.	com/	wpdyn/ content/ arRcle/ 2006/

10/ 05/ AR2006100501781. html.

•	 Sipress,	Computer System	Under AGack, supra.

•	 Brenner,	Toward A Criminal Law for Cyberspace, supra.

•	 John Rogin,	China	Fielding	CyberaGack Units, FCW.com (May 25, 2006), hTp :// www. fcw. com/ arRcle94650-05-25-06-Web.

•	 Brenner,	Toward A Criminal Law for Cyberspace, supra.

33 © 2016 Cyber Future FoundaRon