The next step in federal cybersecurity? Considering an NTSB-style computer safety board
Paul Rosenzweig’s 2018 discussion of a potential computer safety board also centered on the NTSB’s investigative mission and, to some limited extent, on its role as a safety standards issuer. Within these parameters, Rosenzweig argued that a computer safety board modeled after the NTSB should do the following: focus on risk reduction rather than elimination, acknowledge the scope and scale of cyber-attack and create a threshold for review, acknowledge that attribution is difficult in cyber-incidents, recognize that systems are always vulnerable so there is no perfect defense, acknowledge the issues with cooperation, and structure any computer safety board with an understanding that humans and technology are the cause of cybersecurity breaches.[11]
