1. The CISOs Role in Shaping Public Policy
Pete Chronis
@chronis

2. Why should CISOs should care about public policy?
“There are many ways of going forward, but only one way of standing still.” - FDR

3. Why should CISOs should care about public policy?
We need a common, national strategy focused on improving cybersecurity.
Who better to influence the policy debate than cybersecurity pros?

4. Cybersecurity Bills Enacted in the 113th and 114th Congresses
Federal legislative action is not adequately addressing the problem
Cybersecurity Bills Enacted in the 113th and 114th Congresses
Public Law Bill No Title
P.L H.R Cybersecurity Workforce Assessment Act
P.L S Cybersecurity Enhancement Act of 2014
P.L S Border Patrol Agent Pay Reform Act of 2014
P.L S National Cybersecurity Protection Act of 2014
P.L S Federal Information Security Modernization Act of 2014
P.L H.R Cybersecurity Act of 2015 (Division N), including
Cybersecurity Information Sharing Act (Title I)
National Cybersecurity Protection Advancement Act of (Subtitle A of Title II)
Federal Cybersecurity Enhancement Act of 2015 (Subtitle B of Title II)
Federal Cybersecurity Workforce Assessment Act of 2015 (Title III) Title IV

5. Federal agencies are limited to what they can do and their roles are not always clear

6. NTSC Mission
The National Technology Security Coalition (NTSC) champions policies that improve national cybersecurity standards and awareness.
Through dialogue, education and government relations, we unite the public and private sector stakeholders as the preeminent advocacy voice for the CISO.
The NTSC is a non-profit, non-partisan trade association.

7. NTSC Core Initiatives National Data Breach Notification Legislation
NTSC supports enactment of a meaningful and uniform federal national data breach notification law that is consistent, predictable, and feasible on how an affected person shall be notified.
Public-Private Intelligence Information-Sharing
NTSC promotes information sharing partnerships to create a more robust and resilient cybersecurity alliance to protect both private and public sectors’ critical infrastructures from cyber threats.
Cybersecurity Workforce Development
NTSC promotes policies that strengthens the nation’s ecosystem of cybersecurity education, training and workforce development.

8. NTSC/CSA: Working Together
Cybersecurity Policy +
Cybersecurity Advocacy
Cybersecurity Awareness
Cloud Security Standards +
Cloud Security Advocacy
Cloud Security Awareness

9. Tackling Cloud Vendor Security
How can the NTSC and CSA we work together to…
Improve vendor security by partnering together to promote the adoption of cybersecurity best practices.

10. NTSC Vendor Security Vision

11. How are we going to do it?
The NTSC and CSA will partner to help create guidance to help CISOs incorporate CSA/STAR evaluations into their company‘s vendor reivew processs.
We’ll get the word out later this year through...
Whitepaper
Webinars
Speaking engagements

12. A special thank you to the Cloud Security Alliance
For info on the NTSC, visit