01/08/2023
https://finance.yahoo.com/news/us-cybersecurity-director-the-tech-ecosystem-has-become-really-unsafe-222118097.html
This article was published on Yahoo Finance on January 5th.
A Brief Summary (followed by my opinion): Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly attended the 2023 Consumer Electronics Show in Las Vegas and voiced her concern that the burden of cybersecurity has largely been placed on Consumers due to the proliferation of technology in our daily lives.
Easterly: “We've essentially accepted as normal that technology is released to market with dozens or hundreds or thousands of vulnerabilities and defects and flaws,” Easterly said. “We've accepted the fact that cyber safety is my job and your job and the job of my mom and my kid, but we've put the burden on consumers, not on the companies who are best equipped to be able to do something about it.”
As someone who works in cybersecurity for a private company while building a technology business on the side, I tend to agree with her. From what I’ve seen in my experience, private sector security practices (or lack thereof) tend to cut corners where they can in an effort to save costs. Burden on the consumer aside, if you’re running a business that gets hacked and loses consumer information because you wanted to take shortcuts and save costs, you better be putting that saved money into a legal fund, because you’re going to get sued when you lose customers’ data. May not happen today or tomorrow, but it will happen.
I’m very pro-small business and very anti-big government spending, but this is one area where both the government actually needs to spend more money and the private sector needs to get more serious. The National Institute of Technology and Standards (NIST) provides a list of objectives *for free* that businesses can you use to bolster their cybersecurity posture, therefore saving themselves the headache of legal fees and fines, and giving their customers the peace- of-mind they deserve.
Cybersecurity and Infrastructure Security Director Jen Easterly says companies need to work more diligently to ensure the software they put out into the world can't be targeted by hackers.