At least 700 million records have been compromised in known recent data breaches: records from healthcare, financial services, retail, and the public sector among others. Encouraging information sharing about data breaches and other cybersecurity flaws is a common policy prescription. Information sharing refers to making information about cyberthreats and countermeasures accessible for use by organizations beyond those collecting the information. However, one problem in the automating sharing of information is regulation compliance. I will be analyzing which types of regulations can be easily automated by building a framework to enforce regulations on cyberthreat information.

I loved 6.805 where I learned about how technology affects public policy and vice versa. The course led me to write a policy paper on IXP deployment and inspired me to pursue a UROP in the Information Policy Project. Since then, I have written several articles on tech policy issues. This project will combine my passion for technology with my interest in public policy and deepen my understanding of that intersection.