Journal Article - IEEE Security & Privacy

Regulating Cybersecurity: Institutional Learning or a Lesson in Futility?

| November-December 2014

Abstract

On 22 November 2013, the Federal Energy Regulatory Commission approved the latest version of mandatory cybersecurity regulations for the bulk electric system—known as Critical Infrastructure Protection (CIP) Reliability Standards. The CIP standards are relatively unique: they are developed through an unusual model of industry-led regulation that places industry, and not federal regulators, at the center of regulatory design and enforcement. The CIP regulations have received a significant amount of criticism. Critics argue that the regulations are incomplete at best and irreparably flawed at worst. The author examines the lessons we can learn from the CIP standards and poses a provocative question: Are the regulations actually a secret success?

Continue reading (log in may be required):  http://doi.ieeecomputersociety.org/10.1109/MSP.2014.124

For more information on this publication: Please contact Science, Technology, and Public Policy
For Academic Citation: Ellis, Ryan. “Regulating Cybersecurity: Institutional Learning or a Lesson in Futility?.” IEEE Security & Privacy, vol. 12. no. 6. (November-December 2014):
48-54
.

The Author

Recommended
In the Spotlight
RSS
Lawrence Summers, Philip Zelikow, and Robert Zoellick argue that Ukraine’s allies should use the $300 billion in frozen Russian central bank assets to show Putin he cannot outlast Ukraine and the West economically.
Global attention to the problem of sexual violence in conflict is important, writes Dara Kay Cohen, but accountability alone has serious limitations as a tool for deterrence of conflict-related sexual violence and may do little to address the root cause.
Guido Torres assesses impacts of the war in Ukraine on Latin America’s economic and political situation and recommends steps the U.S. can take to reduce the negative impacts and protect Latin American sovereignty.
Most Viewed

Tags