Each year the cybersecurity community gathers in the San Francisco Bay Area to celebrate and share stories of success. Granted it's not exactly like Christmas, but RSA is here and it does provide an opportunity to create a wish list; here's mine.
- Here's my Steve Martin moment: I wish the cybersecurity community would come together and support each other recognizing "we are not the enemy" and must focus our energies on taking down the real enemy, as one cybersecurity team.
- Less talk; more action that leads to a reduction in cyber-crime.
- Cohesion among US Government entities to focus on effective collaboration that puts our best players on the field, in the roles they are best equipped to serve. NIST is our cybersecurity brain trust and we should be following their lead. CISA and the SRMA's are best equipped to operationalize best practices
- Harmonized cybersecurity baseline regulations that replaces the "compliance mindset" with a genuine quest to achieve real cybersecurity protections across critical infrastructure.
- Greater visibility into the trustworthiness of our digital infrastructure that will enable consumers to protect themselves from risk.
- A single, standard and effective machine readable security advisory that communicates product risks based on new vulnerabilities
- A single, standard and effective, up to date, machine readable vulnerability disclosure report that answers the question "Is my software product vulnerable as of right now?" Think of a CARFAX report for software.
- Visibility into trustworthiness of apps in app stores, before installing an app
- Verifiable, trustworthy identities
- More people working in the cybersecurity work force, especially women
- A buildup of the Civil Cyber Defense initiative that encourages more mentors to share their knowledge
- We need confident leaders that know how to lead. Jen Easterly and Puesh Kumar are good role models for good/effective leaders.
- More collegial collaboration aimed at delivering actionable solutions to cybersecurity challenges. CISA's ICT_SCRM Task Force is a good example to follow.
- Better support for the open-source community of contributors. These talented, hard working people deserve to be compensated for their contributions and commitments. Stop expecting software to be free and start valuing these people for their good work.
- More respect and appreciation for the hard working technical people that try everyday to bring real solutions to the table both open-source and commercial products.
- More respect and appreciation for the people that provide support to the community by answering questions and helping people implement solutions
- Mutual respect across the entire cybersecurity community and greater collaboration with business executives to help address business risks from cyber-threats
- Â