David Aaron was quoted in "What Does the National Cybersecurity Strategy Mean for Public and Private Stakeholders?" an article in Information Week regarding the Biden-Harris Administration's National Cybersecurity Strategy, and what actions are now necessary to support the country’s cyber defense.

While new regulation certainly has a role to play, so do other forms of incentive. “Simply adding mandates and regulation could have detrimental economic impacts, promote a ‘bare minimum’ approach to compliance and pass costs downstream. Standard federal incentives such as procurement preferences, tax credits, and grant funding, will go a long way,” explains David Aaron, a privacy and security law attorney at international law firm Perkins Coie.

New enforcement and regulations that do come into play could be more effective if they are more rooted in remediation than penalties, according to David. “Safe harbors and regulatory efforts that focus more on remediation than penalties are important,” David says. “Enforcement and remediation efforts should be risk-based and should not rely on simple check-the-box compliance requirements.”

Read the full article on Information Week.