Sound guidance on design, implementation, and governance of cybersecurity policy

Now in its Second Edition, the Cybersecurity Policy Guidebook delivers an issue-focused treatment of public, private, and individual cybersecurity policy alternatives for treatment of systemic cyber risks. Seven practitioners from government, industry, and academia analyze overlapping perspectives of decision-makers, technology professionals, and critical infrastructure engineers within the recently transformed digital landscape.

The first edition focused on policy issues related to ubiquitous cybersecurity threats, internet governance policies, and policy debates on cyber risk management. This edition focuses on current cyber policy debates such as AI’s impact on cybersecurity, custodial issues for technology platforms, and imminent cyber threats to critical infrastructure, while retaining the first edition’s historical context.

Cybersecurity Policy Guidebook serves leaders of public and private organizations, as well as technology professionals, industry analysts, scholars, and individuals seeking a structured reference on cybersecurity policy issues. Whatever the starting point of perspective, readers will gain the policy knowledge required to act with precision.

JENNIFER L. BAYUK, PhD, is an independent cybersecurity consultant, CEO of Decision Framework Systems, and cybersecurity professor. Previously a Wall Street CISO and Bell Labs security software engineer, she has numerous publications on security architecture, risk management, and cybersecurity forensics.

ART EHUAN is Executive Director of Duke University’s Master of Engineering in Cybersecurity and CISO Executive Certificate programs. A former FBI Supervisory Special Agent, he served as cyber expert on breaches at Heartland, Sony Pictures, Target, Anthem, Equifax, Capital One, and Marriott.

JASON HEALEY is a Senior Research Scholar at Columbia University’s School for International and Public Affairs. He founded the Atlantic Council’s Cyber Statecraft Initiative and was a founding member of the White House Office of the National Cyber Director.

PAUL ROHMEYER, PhD, is an IT management consultant and Information Systems faculty member at Stevens Institute of Technology. He serves on the editorial boards of Computers & Security Journal and Cybersecurity & Cybercrime Journal, with expertise spanning banking, finance, healthcare, and life sciences.

MARCUS H. SACHS, PE, is Senior Vice President and Chief Engineer at the Center for Internet Security. A retired U.S. Army officer and former White House appointee, he previously served as CSO of the North American Electric Reliability Corporation and VP for National Security Policy at Verizon.

DONALD SAXINGER is a financial sector cyber consultant following a career as an FDIC banking supervisor and Section Chief. In those roles, he managed oversight for data center examinations, chaired the FFIEC Examination Handbook, Cybersecurity, and Critical Infrastructure Working Groups, authored cybersecurity guidance, and led interagency rulemaking.

JOSEPH WEISS, PE, is Managing Partner of Applied Control Solutions, LLC, an independent control system cybersecurity consultant. An ISA Life Fellow and member of Control’s Process Automation Hall of Fame, he has published over 100 papers and holds patents on instrumentation, control systems, and OT networks.