INSTRUCTIONS:
1. According to the Presidential Policy Directive – 41 US Cyber Incident Coordination and the NCIRP (2016), how would cyber incident response be handled for another breach into the Office of Personnel Management? How would it be handled for a private company that owns part of the US critical infrastructure? Your answer should include an explanation of what it means to be “in charge” and what “coordinating” authority means and can include other references from the Department of Homeland Security or the Department of Defense. 2. Should additional laws or policies be passed to allow the US Government to assist the US private sector when a major breach occurs? What current laws or policies currently support US Government assistance or intervention into private sector breaches? 3. Do you believe that laws are needed to hold companies more accountable for cybersecurity, why? Are current laws sufficient, if so, what are some of them that would apply?