Public Policy
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
The government’s case against the SolarWinds CISO has been dismissed. What does this development mean?
Public Policy,
Security Compliance
How Human Security Testing Helps the U.S. Government’s Zero Trust Mandate
January 9th, 2023
One major reason for the progress is a May 2021 Executive Order that pushes federal agencies to speedily...
Ethical Hacker,
Expert Interviews,
HackerOne Community Blog,
Public Policy
Calling All “Bureaucracy Hackers”
March 5th, 2018
Lisa Wiswell, a HackerOne advisor and a principal at GRIMM cybersecurity firm, thinks the government needs...
Policy Comments
When regulators have questions about policies and standards around the world, HackerOne has the answers.
- June 28, 2024: HackerOne Comments on Implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)
- May 29, 2024: HackerOne Applauds Senator Warner’s Support for Legal Protection of AI Red Teaming
- April 29, 2024: HackerOne Response to OMB AI RFI
- April 16, 2024: Request for DOJ to Develop a Charging Policy under the CFAA to Protect Independent AI
Trustworthiness Research - March 18, 2024: Comment in Support of a DMCA Exemption for GenAI Research
- February 5, 2024: HackerOne NY Hospital Cybersecurity Requirements Comments
- February 2, 2024: Comments on NIST RFI on Artificial Intelligence Executive Order
- February 2, 2024: Comments on Cybersecurity for Unclassified Federal Information Systems (FAR Case 2021-019)
- February 2, 2024: Comments on Federal Contractor Cybersecurity (FAR Case 2021-017)
- April 6, 2023: Response to UK Computer Misuse Act Consultation
- June 23, 2023: Response to CISA Secure Software Attestation Form
- July 12, 2023: Response to NIST 800-171r3 Draft
- November 6, 2023: Comments to NIST CSF 2.0 Public Draft
- December 21, 2023: Comments on DMCA Section 1201 Generative AI Research
- March 19, 2022: Comments on UK DCMS Cyber Profession Pathway
- July 7, 2022: Comments on FDA Cybersecurity in Medical Devices
- December 14, 2022: Comments on Cyber Requirements for Federal Insurance
- June 08, 2021: Response to UK Computer Misuse Act Call for Information
- September 3, 2020: Proposals for Regulating Consumer Smart Product Cyber Security
- September 10, 2020: Comments on NIST SP 800-53B
External Press
New hacker advocacy group seeks to protect work of security researchers
Cyber regulations can make our nation safer
The Role of Regulation in Comprehensive Cybersecurity
A new hackathon is helping to make elections more secure
Cybersecurity firms to launch legal support fund, advocacy group for ethical hackers
CISA releases HBOM framework for supply chain risk management