Yesterday the DHS Cyber Safety Review Board issued a report on the Microsoft Online Exchange incident that took place this past summer. The board is comprised of experts from across government and industry and independently investigates cyber incidents. You can read a brief synopsis and the whole report at the DHS website, but it draws some fairly pointed conclusions about industry missteps.
Do you think the report left anything out? Does Congress need to make changes so that recommendations from the Board are binding or at least have more teeth? Feel free to leave your thoughts in this thread.
Do you think the report left anything out? Does Congress need to make changes so that recommendations from the Board are binding or at least have more teeth? Feel free to leave your thoughts in this thread.