SAINTCON 2016 - Jeremy Cox (supertechguy) - Getting Involved with the Lawmaking Process

Understanding the complexities of cyber laws in Utah and the necessity of getting involved in the lawmaking process to create effective and reasonable regulations protecting IT professionals and critical infrastructure.

Key takeaways
  • Laws are made by people who don’t understand the profession, so it’s crucial to get involved in the lawmaking process.
  • Laws like the Computer Crimes Act are problematic and have been loosely interpreted, leading to issues with prosecution and defense.
  • There’s a need to modify laws to ensure they’re representative of what they should be, rather than overly broad and open to interpretation.
  • Affirmative defenses can help resolve issues, but they can also lead to additional challenges and costs.
  • Cyber laws in Utah are complex and need to be addressed, with laws like the Computer Crimes Act having far-reaching implications.
  • It’s crucial to keep an eye on the legislative session and technology bills, and engage with representatives and sponsors.
  • Existing laws that apply to physical entrances can be used as a base for creating new laws that apply to technology.
  • Laws need to be revised to clarify what constitutes “authorization” and “permission” to access computer systems.
  • The Computer Crimes Act has a mandatory reporting law, which can cause issues and challenges.
  • Critical infrastructure, such as hospitals and large organizations, are affected by laws like the Computer Crimes Act.
  • Laws need to be challenged and modified to ensure they’re reasonable and effective.
  • It’s essential to reach out to representatives and sponsors to provide input and feedback on proposed laws.
  • Laws like the Computer Crimes Act can have serious consequences for pen testers and IT professionals.
  • Complexity is a major issue in creating laws, with laws like the Computer Crimes Act being challenging to understand and interpret.
  • Laws need to be revised to prevent overbroad interpretation and ensure they’re representative of what they should be.