Consider the following scenarios.
“Amid the explosion of successful ransomware attacks worldwide, a small county government with no information technology (IT) staff developed a customized ransomware response plan that included a chain of command, a system shutdown plan and a negotiation cost-benefit analysis.
As social engineering continues to top the charts in data breach attack patterns, a fully volunteer-run nonprofit obtained high-quality cybersecurity awareness training materials and adopted training requirements for all members.
A critical infrastructure provider in a rural municipality patched software vulnerabilities and updated configuration settings that had created system exposures for years.”
These sound like outcomes from expensive professional consulting engagements, yet they are sample successes from a small number of university-based cybersecurity clinics around the country whose students are helping public interest organizations develop their cybersecurity defenses free of charge.
In their August 2020 Lawfare post, “Improving Cyber-Oriented Education, One Cyber Clinic at a Time,” R Street policy director Tatyana Bolton and Chris Inglis, now White House…
