Cyber Risks · Krebs on Security

Cyber Deterrence Group Urges Greater Disclosure, Transparency

Summary: A National Research Council group, asked by the Office of the Director of National Intelligence to devise cyber attack deterrence strategies, issued a 400-page report calling for mandatory public disclosure of fraud and hacking incidents by governments and organizations of all sizes, including banks. The report focuses on aligning incentives and liabilities so those best positioned to fix problems have reason to do so, and Krebs notes banks are not required to publish loss reports and are spotty and begrudging about filing suspicious activity reports.

Why it matters: Banks are mandated to file suspicious activity reports but gain Safe Harbor once filed within 60 days, and the report's call for mandatory disclosure of fraud and hacking incidents would put loss data that institutions currently keep private into public view.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related