Teaching Cybersecurity Policy
Peter Swire proposes a a pedagogic framework for teaching cybersecurity policy. Specifically, he makes real the old joke about adding levels to the OSI networking stack: an organizational layer, a government layer, and an international layer.
That Guy • December 18, 2018 7:58 AM
I like the ideas for the Organizational, Government, and International.
I would argue for keeping the traditional Layer 8 of “User” in addition to the new ones. No matter how good the Organization & policies, one user can subvert all of it. That’s why spearphishing works.