ITI Releases 2022-2023 Global Cybersecurity Incident Reporting Policy Index
WASHINGTON – As the United States marks Cybersecurity Awareness Month, global tech trade association ITI released its Global Cybersecurity Incident Reporting Policy Index (opens in a new tab). In the index (opens in a new tab), ITI’s experts provide a summary of cybersecurity incident reporting measures across the globe, highlighting key provisions and offering an update on where they stand and what to look out for in 2023. The index covers efforts in Australia, Canada, Europe, India, Japan, Singapore, United Kingdom, and the United States.
“Over the past several years, governments around the world have taken steps to improve visibility into cyber incidents through developing new cyber incident reporting requirements and updating existing ones,” the memo (opens in a new tab) states. “The index includes incident reporting policies from eight countries and covers key information such as the scope of covered entities, threshold for reporting, timeline to report, enforcement mechanisms, among other areas. It seeks to help further inform incident reporting efforts across the globe, particularly in preventing fragmentation of approaches across borders. Because several of these efforts remain in flux, particularly in Canada, the United States, and the United Kingdom, ITI will be closely tracking how these proposals unfold over the next year.”
The index builds upon ITI’s ongoing cybersecurity advocacy. In September 2021, ITI published Global Policy Principles for Security Incident Reporting (opens in a new tab) to help policymakers worldwide as they seek to develop an effective and efficient security incident notification regime. In July 2021, ITI published Principles for Security Incident Reporting in the U.S. (opens in a new tab), first-of-their-kind recommendations designed to help inform U.S. policymakers as they seek to develop a security incident notification regime.
Read the memo here (opens in a new tab).
###
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
