Why Not An “NTSB” For Cyber Attacks?

An academic paper has proposed an agency comparable to the National Transportation Safety Board to investigate cyber attacks. Like the NTSB when it investigates plane and train crashes, the proposed agency would investigate an incident and make recommendations for future safety improvements. This model, the paper suggests, would separate “fact-finding proceedings from any questions of liability, allowing attribution to be established, for example, without parties initiating litigation.” This approach has been recommended to the Trump Administration by the bi-partisan think tank the Center for Strategic and International Studies, but this study, from Indiana University, is the first in-depth look at how such an agency might be structured and how it would work. The study appears in the Albany Law Journal of Science and Technology.