Security Principles: Addressing underlying causes of risk in complex systems
On December 14th, 2022, in collaboration with technologists on team CTO and attorneys in BCP, I gave a presentation at the Federal Trade Commission’s December Open Commission meeting on the systemic approach to security found in the Commission’s orders. The goal of this post is to first explain how the FTC has worked to strengthen its remedies to address the underlying causes of risk in complex systems. The post then highlights some of the...