Cybersecurity laws are necessary for complying with certain cybersecurity-related obligations of international law. The impact of cybersecurity on both national security and the economy is enormous, and cybersecurity policy is of great significance. However, as shown in many incidents and incidents over the past year, effective government support is lacking. National security and cybersecurity must also be fully integrated, and not separate issues.
Worse yet, the administrative response to breaches is weak, leaving in place weak policies, the misapplication of legal authorities, and regulatory gaps. For instance, the government has not established an effective process to address cybersecurity problems, and when it has, it has failed to address some of the fundamental vulnerabilities that go beyond information technology. The state lacks a comprehensive cybersecurity framework. In particular, there is no national system or regulatory body (such as NIST or the Federal Communications Commission, the National Security Agency, or DOD) with legal authority to regulate cyber-related technologies, networks, and products. Since none of the publicly available cybersecurity legislation has established a framework for addressing these issues, regulation of cyber-related products, services, and activities is less than complete, and many businesses in particular have been unable to identify potential risks, protect themselves, and even produce security disclosures.
Despite the challenges to security, several innovative U.S. corporations have been tackling this challenge and developing products and services designed to provide businesses with protections against some of the most common cyber threats.
Most of these companies have a minority ownership in their companies. Smaller companies like RSA, Trailfire, and FireEye are utilizing their companies to develop products for government agencies, law enforcement, and law schools; or to develop security and assurance products for the private sector. While it may not appear to be the most profitable business, growing numbers of U.S. companies are realizing they can become even more valuable in the cybersecurity domain. Small companies with their own expertise are also identifying opportunities to participate in and capture a greater share of cyber-related sales by establishing direct sales relationships with U.S. defense and intelligence organizations, federal and state law enforcement agencies, government agencies (such as the IRS and DOD), and academia.
International cybersecurity
International law requires member states to take measures to protect their infrastructure and to secure their critical national infrastructures. A recent UN Special Rapporteur, Mr. Michael Mller, made the following recommendations regarding cybersecurity policies and policies and development models of cybersecurity legislation and other responses:
Vital, resilient, and resilient infrastructure are among the international property rights of every state, including cybersecurity infrastructure. These do not require any technological adaptation to secure their operation. Indeed, cybersecurity is best viewed as a natural part of the physical world. Consequently, states are mandated to take all necessary measures to ensure that its vital, resilient, and resilient cyber infrastructures are secure from cyber attacks. Visit https://www.fortinet.com/products/secure-web-gateway to get further details about cyber security.