��powerpoint presentation · 2019. 6. 5. · title: ��powerpoint presentation
TRANSCRIPT
![Page 1: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/1.jpg)
![Page 2: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/2.jpg)
An Analysis of Cybersecurity Legislation and Policy Creation
Adam Alexander, Eric Jackson, Bryant Johnson, Paul Graham, Dr. Jaehong Park, and Tania Williams
![Page 3: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/3.jpg)
• Cybersecurity legislation is important.• Difficult to pass• Technology is ever changing
• There are very few studies that attempt draw from legislation across all 50 states.
The Problem
![Page 4: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/4.jpg)
Our GoalProvide the state of Indiana with a searchable database of legislation• This could serve as a baseline when considering new policies.• It could be used to identify major trends.
![Page 5: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/5.jpg)
What We Did
LOREM
• Researched and classified 500 bills related to cybersecurity• 454 – State• 46 – Federal
• Organized bills with metadata into a searchable database(Airtable)
• Performed preliminary analysis of the data
![Page 6: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/6.jpg)
Policy Classification
• Government Service• Finance• Defense• Energy• Water/Wastewater• Communications• Healthcare• Elections• Economic Development• Workforce Development
• Personal Identifiable Information
• Public Awareness and Training
• Education• Emergency Services and
Exercise• Cyber Sharing• Cyber Organizations (Center)• Cyber Pre Thru Post Incident• Legal/Insurance• Local Government• Other critical infrastructure
![Page 7: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/7.jpg)
![Page 8: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/8.jpg)
Organization of Metadata
• Bill number• State• Type of policy• Type of legislation• Originator (senate, house,
bipartisan)• Year introduced• Status
• Link to online source• Related legislation• Description• Political party affiliation• Bill sponsor• Link to vote count information
![Page 10: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/10.jpg)
Analysis
• All 50 states were examined.• Most states only had between 1-10 total policies.• Only 9 states had 20 or more.
• Dates were important.• States that introduced policies before 2016 – Not active.• States that introduced polices after 2016 – Active.
• Active statesIllinois, Maryland, New York, and Vermont
![Page 11: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/11.jpg)
Dates States Were Actively Passing Legislation
![Page 12: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/12.jpg)
• Failed Legislation• Larger percentage of failed bills than passed bills• Cyber Sharing, Economic Development, and Education – highest failure rates• Elections and Water/Wastewater – highest success rates
• Vetoed Bills• Only 5 bills were vetoed
Analysis Cont.
![Page 13: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/13.jpg)
![Page 14: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/14.jpg)
Influence of Federal Legislation• Federal legislation is focused on
• Defense
• Cyber Pre-through-Post Incident
• Cyber sharing
• State legislation is focused on:• Education
• Personally Identifiable Information
• Government Services
• Legal
Analysis continued
![Page 15: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/15.jpg)
![Page 16: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/16.jpg)
Bipartisan Policy Creation• Bipartisan attempts – 56% success• Partisan attempts – 40 % success
Analysis continued
![Page 17: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/17.jpg)
Bipartisan vs Partisan Efforts
![Page 18: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/18.jpg)
Varying terminology• Verbiage varied from state to state.
Determining relevance• Desired topics were buried in unrelated content.
Tracing a bill’s originOriginates in house or senate
Challenges
![Page 19: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/19.jpg)
State bills• 305 total• 138 Passed• 167 Failed• Success rate of 45%
Bipartisan success• Bipartisan bills had 56% success• Partisan bills had 40% success
States leading the way in Cybersecurity• Vermont• Virginia
Conclusion
![Page 20: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/20.jpg)
• Correlation between legislation and cyber eventsExample: Equifax breach
• Measure impact of key successful legislation over timeDid the legislation have the intended effect?
• Examination of failed legislationLearn from mistakes of the past
Future Work
![Page 21: ��PowerPoint Presentation · 2019. 6. 5. · Title: ��PowerPoint Presentation](https://reader034.vdocuments.us/reader034/viewer/2022051804/5fecd77a1cdddf184b0a10b5/html5/thumbnails/21.jpg)