Cyber Safety Review Board needs stronger authorities, more independence, experts say

Experts testifying before the Senate Homeland Security Committee argued the Cyber Safety Review Board lacks independence, subpoena power, full-time staffing, and transparency, leading to shallow reviews and potential conflicts of interest, and urged reforms to member and case selection processes before expanding its authorities. They noted the CSRB has not examined pivotal incidents like SolarWinds Sunburst despite issuing reports on Log4J and Lapsus$, while lawmakers consider legislation to codify the board and potentially grant subpoena power.