Insights & Research

When it comes to digital identity and AI, government and others are in an arms race against attackers. It’s time to change the equation and partner with industry to leapfrog the attackers, rather than race to keep up with them.

The intersection of AI and security is a hot topic but we find that people haven’t spent time to understand what is truly new about cybersecurity, and where organizations need to bolster defenses as AI use cases promulgate.

Cybersecurity was a critical for of the recent NATO Summit. Read the latest from CCPL staff in Compiler on why private partnerships are key to protect NATO members.

The NTIA released a report examining the risks and benefits of dual-use foundation models with publicly available model weights, also examining the impact of openness on innovation and how to evaluate and quantify risk for these models.

In our latest Distilling Cyber Policy podcast, Alex and Jen are joined by Grant Schneider, Senior Director of Cybersecurity Services at Venable. Schneider discusses the National Defense Authorization Act (NDAA) and its implications for cyber policy.

CCPL’s Belisario Contreras testified at a subcommittee hearing for the Federal Senate of Brazil on the importance of a National Digital Security Agency in the country.

The GSA FedRAMP PMO released the final version of its Emerging Technology Prioritization Framework that seeks to expedite FedRAMP authorizations for select cloud offerings with emerging technology features, such as generative AI.

The Office of the National Cyber Director released an Initial Stages of Implementation report on the National Cyber Workforce and Education Strategy showing progress made thus far.

NIST has selected the Post-Quantum Cryptography algorithms and now is the time for organizations to decide to lead or get left behind. Establishing a foundation of trust and protecting information and infrastructure with these standards is crucial.

NIST hosted the Ready, Set, Update! Privacy Framework 1.1 + Data Governance and Management Profile Workshop, a two-day event to solicit feedback on updates to the Privacy Framework and the creation of a Data Governance and Management Profile.