Safeguarding American Transportation and Infrastructure Networks

This analysis revisits a 2018 argument that the United States must prioritize cybersecurity for its modernizing infrastructure and transportation networks. Seven years later, despite consistent concern from business leaders, America's cyber risk management has not shown obvious improvement. Evidence for this includes the worsening prevalence of zero-day vulnerabilities and year-over-year increases in ransomware attacks. These trends suggest that many organizations are not getting materially better at security and that software vendors lack strong market incentives to build more secure products.