Time to prioritize cyber security and protect what’s important

TLDR:

• No empowered investigatory body for cyber incidents
• CSRB lacks subpoena power and generalizes findings

Main Points:

When an airplane crashes, investigatory bodies leap into action, but there is no such empowered body for cyber incidents, like the recent faulty update by CrowdStrike. The Cyber Safety Review Board lacks subpoena power and struggles to generalize findings from specific incidents. Establishing standards and providing thorough research can help improve cybersecurity practices.