Mr. Inglis and Harry Krejsa, a senior adviser in his office, mapped out ways in which cybersecurity needs to change in a Feb. 21 article published in Foreign Affairs, dubbing it a “cyber social contract.” While regulation or specific policy was not explicitly mentioned, officials told the Post the article serves as a good guide to the kinds of policies the office will pursue.
Here are the top takeaways from the piece:
- The article proposed a “new set of obligations” for companies and governments to keep systems secure from the start, rather than rushing to address problems once they are compromised.
- Mr. Inglis and Mr. Krejsa urged that the responsibility for cybersecurity be shifted away from the most common targets of small and medium-sized organizations and onto the tech platforms whose software is being breached.
- This means Big Tech should prioritize security ahead of user interfaces or updates.
- They also advise governments to spend more on research and development to help companies protect themselves from hackers.
