Cybersecurity Regulation: It’s Not ‘Performance-Based’ If Outcomes Can’t Be Measured

2022-10-08 00:10

Code on computer monitor. (Source: Markus Spiske, https://unsplash.com/photos/Skf7HxARcoc; CC0 1.0, https://creativecommons.org/licenses/by/1.0/)

After Colonial Pipeline suffered a ransomware attack in May 2021 and took its 5,500-mile system offline for nearly a week, the Transportation Security Administration (TSA) issued a set of first-ever directives imposing mandatory cybersecurity requirements on pipeline operators. Industry balked, This article has been indexed from Lawfare