Center for Cybersecurity Policy and Law

As NIST prepares to release the latest version of SP 800-81, CCPL gathered experts and policymakers last month to explore the importance of secure DNS and how it can mitigate cyber risks.

Read the full recap below:
www.centerforcybersecuritypolicy.org/insights-and...

National cybersecurity strategies depend on public-private trust, report warns An influential cybersecurity think tank urged governments to consult extensively with a wide variety of business stakeholders before making ambitious plans.

When it comes to developing a clear, cohesive national cybersecurity strategy, public and private sector collaboration is key.

Read more from Cybersecurity Dive on CCPL’s latest whitepaper highlighting its key recommendations and insights:
www.cybersecuritydive.com/news/nationa...

In response to NIST's initial draft of the Cyber AI Profile, the @cybercoalition.bsky.social and the Hacking Policy Council submitted comments supporting its creation — aiming to help orgs mitigate cyber risks to AI models.

Full comments here:
www.centerforcybersecuritypolicy.org/insights-and...

Third Annual Cyber Policy Awards On the evening of Thursday, February 5, 2026, IST hosts the Third Annual Cyber Policy Awards™ Gala in Washington, DC. During the event, members of the cyber policy community will present The Atlas awa...

CCPL is proud to be a sponsor of the Third Annual #CyberPolicyAwards, hosted by @istorg.bsky.social. The Cyber Policy Awards are an important opportunity to celebrate our
colleagues who have driven progress in 2025, and look ahead to 2026.

Learn more: securityandtechnology.org/event/third-...

As the U.S. government prepares to launch its National Cybersecurity Strategy, check out our latest whitepaper for recommendations on a clear, comprehensive national cyber strategy to ensure the safety of networks and infrastructure.

www.centerforcybersecuritypolicy.org/insights-and...

Happening tomorrow! The annual “Identity, Authentication, and the Road Ahead 2026” policy forum will feature keynote speeches and panels on digital identity, authentication, cyber, deepfakes and more.

Check out the agenda and RSVP here while there’s still time →
idforum2026.sched.com/list/simple

Interested in hearing from policymakers and leading industry experts on the latest in identity policy, cybersecurity and deepfakes? Join us on 1/29 for the annual “Identity, Authentication, and the Road Ahead 2026” policy forum!

Register today →
form.jotform.com/253444506561...

The annual “Identity, Authentication, and the Road Ahead 2026” policy forum is happening this week! Join us on 1/29 to hear key discussions on the future of identity, fraud and authentication from policymakers and industry experts.

RSVP to attend →
form.jotform.com/253444506561...

Happening 1/29, this year’s #IDPolicyForum will feature keynote speeches from Rep. Pete Sessions (TX-17), @repbillfoster.bsky.social (IL-11) and industry experts on privacy, cyber and authentication.

RSVP here today →
idforum2026.sched.com/list/simple

This year’s #IDPolicyForum is right around the corner! Join us on 1/29 to hear a series of panels and keynotes by policymakers and industry experts for insights on the future of security, digital identity, and more.

Check out the agenda and RSVP here →
idforum2026.sched.com/list/simple

During yesterday’s event on secure DNS, the Office of Management and Budget's Acting Federal CISO Michael Duffy discussed OMB’s role in the creation of the national cybersecurity strategy.

Read more in Inside Cybersecurity:
insidecybersecurity.com/daily-news/f...

To round off today’s event of NIST and secure DNS, Michael Duffy, Acting Federal CISO at the Office of Management and Budget, joined Ross Nodurft to examine how federal agencies embrace NIST policy, how OMB ensures it is heading in the right direction across all agencies and more.

Why is secure DNS foundational to security?

During a fireside chat moderated by CCPL’s Ari Schwartz, NIST’s Kevin Stine and Infoblox’s Scott Harrell explored secure DNS's role as a cyber threat protection and resiliency mechanism and NIST’s influence in driving cybersecurity.

In a keynote speech at CCPL’s NIST event, Kevin Stine, Director of the Information Technology Laboratory at NIST, discussed how NIST is advancing American tech through innovation in emerging technology, providing critical guidelines and collaborating with private and global partners.

CCPL’s event on secure Domain Name System (DNS) and NIST SP 800-81 has kicked off with a welcome from Adam Dobell!

Today’s discussion gathers experts, policymakers and industry to discuss the importance of secure DNS, the pillars of NIST’s Special Publication 800-81 and more.

In response to Request For Comment (RFC)-0024, FedRAMP calls for changes to the Rev5 Process, including the acceleration of the requirements for machine-readable packages.

Read the full proposed timeline, requirements and more here:
www.centerforcybersecuritypolicy.org/insights-and...

CCPL’s NIST SP 800-81 event is happening Tuesday! Join policy leaders, government and industry stakeholders to be part of key discussions on Internet infrastructure, DNS security and NIST policymaking.

RSVP here →
www.connect.venable.com/92/5263/land...

There is much confusion about what “cyber operations” entail, which can make the planning, execution and impact of these operations more difficult.

Check out the first blog in our latest series on what cyber operations actually are:
www.centerforcybersecuritypolicy.org/insights-and...

Consent is not optional. This week, Ben and Dave discuss the ongoing controversy surrounding Grok and its ability to generate nonconsensual nude images, raising fresh concerns about AI safeguards, consent, and accountability, before turning to a conversation with ⁠Caitlin Clarke⁠, Senior Director for Cybersecurity Services at ⁠Venable⁠, who breaks down the Cybersecurity Information Sharing Act of 2015 (CISA).

On the latest episode of Caveat, Caitlin Clarke explores the Cybersecurity Information Sharing Act of 2015 (CISA), highlighting its role, impact on cybersecurity, where reauthorization stands today and more.

Listen to the full episode here:
thecyberwire.com/podcasts/cav...

In case you missed it, CCPL is hosting an event Jan. 20 on secure DNS and the Evolution of NIST SP 800-81!

The event will feature conversations on NIST’s role in Internet security, the importance of secure DNS, and more.

Register below to attend:
www.connect.venable.com/92/5263/land...

Join CCPL on Jan 20 for a discussion on secure Domain Name System (DNS) and its role as foundational infrastructure for internet and national security, anchored around NIST Special Publication 800-81.

RSVP here to attend →
www.connect.venable.com/92/5263/land...

CISA director void leaves cyber agency embroiled in uncertainty From addressing Volt Typhoon to stemming workforce losses, cyber experts say CISA needs a permanent leader to move forward.

CCPL Executive Director Ari Schwartz recently sat down with @jdoubledaywfed.bsky.social to discuss the need for permanent leadership at CISA and action on other critical cyber policy goals.

New from @federalnewsnetwork.com:
federalnewsnetwork.com/cybersecurit...

YouTube video by Inclusive Cyber Never Assume Anything: Stacy O'Mara on Policy, Breaking Into Cyber, and Why Basics Still Fail

On the latest episode of the Inclusive Cyber Podcast, Stacy O’Mara discusses her journey into the cybersecurity space, her insights on AI and emerging tech, and much more.

Tune in here to listen to the full episode:
www.youtube.com/watch?v=TdUf...

#DistillingCyberPolicy Podcast’s latest episode features CCPL experts Caitlin Clarke, @jgrantindc.bsky.social and @heatherwest.bsky.social, along with past guests, MEP Bart Groothius, Irfan Hemani and Katharina Sommers — on what cyber policy could look like in 2026.

t.co/74UM7bXMB1

Report: Grand Forks drone threat exercise reveals gaps in local response options During the exercise, local officials felt they did not have enough resources or the right authority to respond to a possible drone threat and subsequent attack.

In case you missed it, last month, CCPL released the findings from its tabletop, held in Grand Forks, ND, on drone safety, highlighting the need for more resources and authority during a drone threat.

Read more in the Grand Forks Herald:
www.grandforksherald.com/news/north-d...

This year’s #IDPolicyForum “Identity, Authentication and the Road Ahead,” will feature discussions on deepfakes, the ITRC’s 2025 Data Breach Report and more, with a keynote from Rep. Pete Sessions! Join us on Jan 29.

RSVP to attend in-person or virtually→
form.jotform.com/253444506561...

Subsea cables carry nearly all global internet traffic — but their security is now under scrutiny. CCPL urged the FCC to strengthen protections & resilience in its submarine cable rulemaking.

Check out Inside Cybersecurity's article on the recent filing:
insidecybersecurity.com/daily-news/v...

#DistillingCyber podcast is back with a special episode featuring Stacy O'Mara & Leonard Bailey.

Tune in to explore whether offensive cyber operations should be used to counter cyber threats — if so, who should be authorized to carry them out? www.centerforcybersecuritypolicy.org/insights-and...

Europe's DMA raises new security worries for mobile ecosystems - Help Net Security EU DMA rules can weaken mobile protections by opening core system functions to third parties. A report outlines key DMA mobile security risks.

Europe’s DMA raises new security worries for mobile ecosystems

📖 Read more: www.helpnetsecurity.com/2025/12/15/e...

#cybersecurity #cybersecuritynews #mobiledevices #dataprotection @cyberseccenter.bsky.social

In October, we hosted a hypothetical exercise examining the impact of a drone attack on a university hockey game, electric grid & nearby air base.

Check out our latest report for key findings & recommendations to deter & offensive drone attacks.

www.centerforcybersecuritypolicy.org/insights-and...