Security News > 2023 > March > New National Cybersecurity Strategy

It's basically a smart strategy, but the hard parts are always the implementation details.

It's one thing to say that we need to secure our cloud infrastructure, and another to detail what the means technically, who pays for it, and who verifies that it's been done.

One of the provisions getting the most attention is a move to shift liability to software vendors, something I've been advocating for since at least 2003.

News URL

https://www.schneier.com/blog/archives/2023/03/new-national-cybersecurity-strategy.html