Cyber Invisibility: Developing a Security Incident Notification Regime
summary
Discussion of designing a U.S. security incident reporting regime that covers choices about reporting thresholds, notification timelines, and liability protections. Panelists from IBM Security X‑Force, Accenture, and Palo Alto Networks compare practical considerations and policy options for structuring mandatory incident notifications to help response and mitigation.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 3:01Cyber Incident Reporting
- 4:02Threat Intelligence Sharing Incident Reporting
- 11:02Who do you notify
- 15:32The intent
- 19:07What will be important
- 26:45Timing
- 29:58Leveraging limited resources
- 33:45What information will you get back
- 36:28How can they help
- 38:30Questions Answers
- 39:58How will this be solved
- 41:00Big picture trends
- 43:58Sharing intelligence
- 44:53Quarterly touch points
- 45:40Industry to industry sharing
- 47:53Can you rephrase that question
related talks
49mIR: Optimizing Communications and Action Between Legal and Tech Leaders
48mEnding the Game of Telephone: The Future of Cyber Incident Reporting
55mCybersecurity as Realpolitik
42mPreparing for the New Era of Cybersecurity Disclosure
27m4 Panel Session - Bridging Policy and Practice
55mWho You Gonna Call: The Quest for a National Data Breach Reporting Law
58mPanel Discussion - The Risks of Requiring Premature Vulnerability Disclosures
55mThe State of Incident Response