CISA Cost-Benefit Analysis

The CISA is the Computer/Cybersecurity Information Sharing Act that would give government agencies the right to share cybersecurity threats with the public. The CISA bill requires the Director of National Intelligence and the Departments of Homeland Security (DHS), Defense, and Justice to develop procedures to share cybersecurity threat information with private entities, nonfederal government agencies, state, tribal, and local governments, the public, and entities under threats to detect, prevent, or mitigate cybersecurity threats or security vulnerabilities. Private entities may monitor and operate defensive measures on: (1) their own information systems; and (2) with written consent, the information systems of other private or government …show more content…
David S. Levine, a professor at Elon University School of Law comments, “If you are doing a basic cost-benefit-analysis, there are gigantic costs and risks associated with this bill, with little or no upside on the very real issue of how to assess cyber espionage and cybersecurity issues,”. “I am not questioning the motivations. I am questioning whether there are any benefits worth all of these risks.” Overall, the intent of the bill is with good intention of having a centralized hub that detects cybersecurity threats as quickly as possible and prevent the spread of the threat by warning other organizations. However, with the bill, it comes with personal and privacy liability. Though the bill comes with some benefits, there are a lot of risk that comes with. I believe the end results does not really tackle the main issue of security and privacy. And by passing the bill, it does not solve much but open the door for privacy liability and that the risk overweigh the benefits.
Ethical Hacking of Commercially Provided Source …show more content…
I think there should be the need for white hat hackers to help organization straighten their security systems and mitigate the potential threat of black and grey hat hackers. The white hat hackers will make it much more difficult for a black hat hacker to hack organizations’ computer systems. Without white hat hackers to test, break and penetrate the system, it will be much harder for organization to identify system vulnerability and therefore will prone to the threat of being hacked. Organization should look into hiring white hat hackers and should perform detailed background checks to ensure a well trusted individual is