Cybersecurity
Überblick
Strong cybersecurity protects from digital attacks the systems, information, and infrastructure people, businesses, and governments rely on every day. As threats evolve, ITI works with policymakers in the U.S. and around the world to advance policies that strengthen cybersecurity, manage risk, and reflect new technologies and capabilities.
ITI’s Position
ITI’s position: Focus cyber policy on real-world risks
ITI members build cybersecurity tools, defend against attacks, respond to incidents, and protect data and infrastructure. ITI brings that expertise to policymakers to help shape rules that strengthen security and keep pace with evolving threats.
- Ensure cybersecurity policy is risk-based and adaptable: Cyber threats and technology change quickly. ITI supports outcome-based rules that set strong security goals while giving companies to adjust how they protect systems as risks evolve.
- Cut regulatory overlap and conflicts: ITI supports greater coordination among government agencies so companies do not face conflicting security and incident-reporting requirements. This allows cybersecurity teams to devote time preventing and responding to attacks.
- Strengthen cybersecurity across borders: Cyber threats are borderless, and a single attack can disrupt companies and critical infrastructure across multiple countries or impact systems across multiple regions at once. ITI supports global collaboration among governments and the use of international standards to prevent, prepare for, and respond to cyber threats.
More on Cybersecurity
-
Learn more
ITI’s AI Security Policy Principles provide recommendations to policymakers on how to leverage AI to improve shared cybersecurity outcomes and how to secure AI systems.
-
Learn more
ITI’s Policy Principles for Cybersecurity Certification offer governments a risk-based approach to certification, including when it should be used, alternatives to consider and the role of international standards.
-
Learn more
ITI’s Global Policy Principles for Security Incident Reporting outline how governments can create clear, effective reporting rules that focus on serious incidents, protect sensitive information and avoid overlapping requirements.
ITI’s Impact
-
72 hours
The reporting window ITI recommends after a confirmed cyber incident, a standard it has advanced with policymakers in the US and around the world. -
8
The number of global markets covered by ITI’s Cybersecurity Incident Reporting Policy Index.