Cyber Civil Defense: Volunteers to the Rescue

The talk looks at the gap in cybersecurity help for organizations that deliver essential public services, such as municipalities, hospitals, school districts and nonprofits. These groups often cannot afford protection or hire staff with the right skills. The speaker, a policy researcher at UC Berkeley's Center for Long-Term Cyber Security, explains how her team spent six months mapping existing volunteer efforts with about thirty experts from insurance, consulting, academia, and managed service providers.

The landscape falls into three groups: state-run civilian cyber corps, university clinics, and nonprofit-led volunteer groups. Their services include incident response, risk assessments, training, and threat intelligence sharing. Access is uneven, many organizations do not know these programs exist, and liability agreements, volatile funding, and inconsistent impact metrics limit their growth. The roadmap recommends near-term steps such as expanding programs into underserved states, clarifying liability protections, improving volunteer-to-client matching, and giving organizations handoff resources and guidance for choosing managed providers. Longer-term ideas include secure-by-default products, state-backed shared service pools for utilities, and security education in schools.

The main takeaway for attendees is to find a local volunteer program and to press policymakers to fund state-level programs. The speaker pointed to the roadmap, a state guidebook with model bills, and an upcoming conference session on the volunteer distribution networks.