Every cyber threat can't be a top priority. A new framework offers a way to decide which challenges deserve long-term research attention

There are more cybersecurity challenges than any organization can realistically pursue at once. A new framework from the Carnegie Mellon University Software Engineering Institute identifies seven areas that its researchers believe warrant sustained attention because of their potential impact on future national-security missions. Greg Touhill, director of the institute's CERT Division, is here to explain how that framework can help leaders decide where to place their time, attention and research dollars. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info .