TIM-8335 v2

Ludvigsen, K. R. (2025). Creating cybersecurity regulatory mechanisms, as seen through EU and US law. arXiv.
This article analyzes and compares cybersecurity regulatory mechanisms in the European Union and the United States to derive principles applicable for developing legislation in other democratic jurisdictions.

Harvard Law School Forum on Corporate Governance. (2025, March 6). Board oversight of cybersecurity incidents.
This article from the Harvard Law School Forum on Corporate Governance examines how corporate boards are evolving their oversight of cybersecurity risks and incident response in early 2025, particularly in response to new SEC disclosure requirements.

International Monetary Fund. (2025, January 24). Using top-down compliance gap techniques to supplement the compliance risk management framework. IMF eLibrary.
This IMF technical note discusses how to enhance compliance risk management frameworks by utilizing detailed insights gained from top-down compliance gap assessments, primarily within the context of tax administration.

United States Department of State. (2024, May). United States international cyberspace & digital policy strategy.
This official strategy document outlines the United States' comprehensive approach to promoting an open, secure, and resilient global digital ecosystem and advancing its interests through international cyberspace and digital policy.

National Conference of State Legislatures (NSCL). (2022, January 12). Cybersecurity legislation 2021.
This website provides information about recent cybersecurity legislation, including introductions, enactments, and the status of various legislation by state.

Department of Homeland Security (DHS) (n.d.). Cybersecurity.
This website provides information about various cybersecurity concerns and initiatives of the Department of Homeland Security.

Cybersecurity Governance | CISA. (2017). Cybersecurity and Infrastructure Security Agency CISA. https://www.cisa.gov/topics/cybersecurity-best-practices/cybersecurity-governance
This website provides a governance cross-site report and case studies that explore cross-enterprise governance mechanisms used by states across a range of common cybersecurity areas and offer insight on trends and concepts useful to other states and organizations that face similar challenges.

The EU Cybersecurity Act | shaping Europe’s digital future. (n.d.). Retrieved April 17, 2025, from https://digital-strategy.ec.europa.eu/en/policies/cybersecurity-act

Government Accountability Office. (2024, June). Cybersecurity: Efforts initiated to harmonize regulations, but significant work remains (GAO-24-107602).
This GAO report examines the U.S. government's ongoing initiatives to harmonize cybersecurity regulations across various sectors, highlighting the persistent challenges and the necessity of continued effort to achieve more cohesive frameworks.

Electronic Frontier Foundation. (2024, January 29). In final talks on proposed UN cybercrime treaty, EFF calls on delegates to incorporate protections against spying and restrict overcriminalization or reject convention.
This Electronic Frontier Foundation analysis details the critical issues debated during the final negotiations for the proposed UN cybercrime treaty, highlighting concerns regarding potential government surveillance powers and the need for robust human rights safeguards within the international legal framework.

Sharma, S. (2019, November). Data privacy and GDPR handbook. Wiley.
This reference guide assists organizations that strictly adhere to data privacy laws in the EU, the USA, and governments around the world. This authoritative and comprehensive guide includes the history and foundation of data privacy, the framework for ensuring data privacy across major global jurisdictions, a detailed framework for complying with the GDPR, and perspectives on the future of data collection and privacy practices.

Moschovitis, C. (2021, February). Privacy, regulations, and cybersecurity. Wiley.
This guide provides detailed information on developing privacy protections in the organization's cybersecurity program. Comprehensive information on privacy regulations (GDPR) and other landmark laws that apply to different organizations is provided.

The Global Solutions Initiative. (2025, March). The cyber diplomacy of constructing norms in cyberspace (T20 Policy Brief).
This policy brief explores the challenges of establishing effective international behavioral norms for cyberspace amidst geopolitical tensions and technological ambiguities, suggesting that new approaches to cyber diplomacy are needed.