Stanford Webinar: To Attribute or Not Attribute, Is That the Question?

Cyber Policy, Security and Risk Executive Education Program

“Who dunnit?” is often among the first questions that victims, leaders, and the press ask when dealing with a cyber incident, and for good reason: the answer may help stakeholders understand the nature, causes, and consequences of the incident. But there is more to attribution than the simple binary choice between public attribution and no attribution at all that is prevalent in public debates about cyber policy and incident response. This webinar examines attribution dynamics and provides a framework for senior leaders to use when faced with business or policy decisions about attribution and explores the spectrum of stakeholders involved in policy discussions and implementation.

As a preview for the upcoming Cyber Policy, Security and Risk Executive Education program, Andrew Grotto provides an overview of the 4-day in-person course at Stanford University, taking place August 17-20, 2020, along with a 25-minute lecture on policy and business dynamics relevant to a public or private sector actor’s decisions about whether and how to attribute a malicious cyber incident to a suspected perpetrator.

You Will Learn
- Issue scoping for decision making at the crux of the attribution debate
- How to think about digital technologies, data, privacy, and consumers
- How to overcome disconnects between policy, law, and the tech community