25th Parliamentary Intelligence-Security Forum – Cybersecurity: The Case for Zero Trust, Resilience And Regulation

Honorable Cyrus Vance Jr. emphasized the critical need for cybersecurity to transition from a solely preventive approach to a focus on resilience. He acknowledged the inevitability of cyberattacks and the necessity for communities to be adequately prepared for effective responses. Drawing upon his extensive experience in New York City, he highlighted the city’s realization in 2017 that there was no unified response plan for a significant cyberattack targeting critical infrastructure, including power, water, hospitals, and transportation systems. Consequently, the city established a public-private partnership that brought together government agencies, law enforcement, and private-sector operators of critical infrastructure.

This initiative was based on three key pillars: real-time intelligence sharing spearheaded by the NYPD, joint training exercises (encompassing simulations conducted at IBM’s cyber range), and the establishment of a coordinated response framework for major incidents. Since the implementation of this model in 2018, New York has enhanced its operational resilience despite persistent cyber threats.

Vance emphasized that cyberattacks on critical infrastructure can have cascading effects across sectors and pose a threat to public safety, underscoring the necessity of community-wide coordination. Federal agencies alone lack the capability to manage or restore local systems during major incidents; cities and communities must be proactive in safeguarding themselves collectively. He concluded that genuine cybersecurity resilience hinges on shared responsibility, wherein governments, businesses, and citizens collaborate to protect the broader community, including small and medium-sized enterprises that constitute the economic backbone.