Jim Dempsey

Editor’s Note: This is the final installment in a three-part series on cybersecurity enforcement. Click here for Part 1 and here for Part 2. In enforcing any regulatory system,…

In recent weeks, there have been urgent warnings about the risks of rapid developments in artificial intelligence (AI). The current obsession is with large language…

Editor’s Note: This is the second in a three-part series on cybersecurity enforcement. Click here for part one. Part three will be published in the coming…

A key pillar of the Biden administration’s recently released cybersecurity strategy is the establishment of mandatory requirements for critical infrastructure. Noting that it had already…

Well, they’ve done it. The Biden administration’s new National Cybersecurity Strategy takes on the third rail of cybersecurity policy: software liability. For decades, scholars and…

The massive appropriations bill signed by President Biden on Dec. 29, 2022, included, among other riders, language requiring the makers of internet-connected medical devices to…

After Colonial Pipeline suffered a ransomware attack in May 2021 and took its 5,500-mile system offline for nearly a week, the Transportation Security Administration (TSA)…

Legislation approved on June 8 by the U.S. House of Representatives to address the cybersecurity of medical devices may offer a good model for a…

Concerns over the possible Russian use of cyber weapons against U.S. domestic critical infrastructure in connection with the Ukraine crisis—warnings renewed on Feb. 11—should prompt…

This week, Andy Grotto and I published a new working paper on policy responses to the risk that artificial intelligence (AI) systems, especially those dependent…