Search

Begin New Search Topic Governance Author James Andrew Lewis

1. A Shared Responsibility: Public-Private Cooperation for Cybersecurity

Author:
Eugenia Lostri, James Andrew Lewis, and Georgia Wood
Publication Date:
03-2022
Content Type:
Special Report
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Cybersecurity is a priority for Congress and for the Biden administration as online crime and espionage reach unparalleled heights. To improve cybersecurity in federal agencies and in critical infrastructure, the administration has built a strong team, elevated the positions of White House officials dealing with the issue, and released a series of policy directives. In Congress, 157 pieces of legislation addressing cybersecurity were introduced during 2021, with proposals ranging from capacity building and workforce development to updating federal policy. Crime and espionage have made cybersecurity a national priority, and action on cybersecurity is more likely than ever in 2022. CSIS convened two private roundtables with senior government officials and senior information security executives from major enterprises in a range of U.S. industry sectors. The goals of the roundtables were to identify common challenges, discuss best practices, and outline avenues for cooperation.
Topic:
Security, Infrastructure, Governance, Cybersecurity, and Public-Private Partnership
Political Geography:
North America and United States of America

2. Rethinking Cybersecurity Strategy, Mass Effect, and States

Author:
James Andrew Lewis
Publication Date:
01-2018
Content Type:
Working Paper
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Despite all the attention, cyberspace is far from secure. Why this is so reflects conceptual weaknesses as much as imperfect technologies. Two questions highlight shortcomings in the discussion of cybersecurity. The first is why, after more than two decades, we have not seen anything like a cyber Pearl Harbor, cyber 9/11, or cyber catastrophe, despite constant warnings. The second is why, despite the increasing quantity of recommendations, there has been so little improvement, even when these recommendations are implemented. These questions share an answer: the concepts underlying cybersecurity are an aggregation of ideas conceived in a different time, based on millennial expectations about governance and international security. Similarly, the internet of the 1990s has become “cyber,” a portmanteau term that encompassed the broad range of global economic, political, and military activities transformed by the revolution created by digital technologies. If our perceptions of the nature of cybersecurity are skewed, so are our defenses. This report examines the accuracy of our perceptions of cybersecurity. It attempts to embed the problem of cyber attack (not crime or espionage) in the context of larger strategic calculations and effects. It argues that policies and perceptions of cybersecurity are determined by factors external to cyberspace, such as political trends affecting relations among states, by thinking on the role of government, and by public attitudes toward risk. We can begin to approach the problem of cybersecurity by defining attack. While public usage calls every malicious action in cyberspace an attack, it is more accurate to define attacks as those actions using cyber techniques or tools for violence or coercion to achieve political effect. This places espionage and crime in a separate discussion (while noting that some states use crime for political ends and rampant espionage creates a deep sense of concern among states). Cyber attack does not threaten crippling surprise or existential risk. This means that the incentives for improvement that might motivate governments and companies are, in fact, much smaller than we assume. Nor is cyber attack random and unpredictable. It reflects national policies for coercion and crime. Grounding policy in a more objective appreciation of risk and intent is a first step toward better security.
Topic:
Science and Technology, Governance, Cybersecurity, and Digital Economy
Political Geography:
Global Focus

3. Underestimating Risk in the Surveillance Debate

Author:
James Andrew Lewis
Publication Date:
12-2014
Content Type:
Working Paper
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Americans are reluctant to accept terrorism is part of their daily lives, but attacks have been planned or attempted against American targets (usually airliners or urban areas) almost every year since 9/11. Europe faces even greater risk, given the thousands of EU citizens who will return hardened and radicalized from fighting in Syria and Iraq.
Topic:
Intelligence, Terrorism, Counterinsurgency, and Governance
Political Geography:
Iraq, America, Europe, and Syria