Cybersecurity: Survey plus Data Analytics Analysis of SEC Data Indicate Diversity Exists

Abstract

The USA Federal (i.e., Securities and Exchange Commission (SEC)) Cybersecurity Research and Development (R&D) Programs by Agency were analyzed using data analytics. They revealed diversity in the acceptance of R&D Programs as selected by 83 agencies. This indicated that there is a lack of agreement among the agencies as to which R&D programs should be utilized. Artificial Intelligence Programs were inserted by 36% of the agencies as part of Internal Control. Nine agencies inserted privacy as part of their Internal Controls. After joining the files using IDEA software, a negative correlation was found between all objectives (e.g., deter, protect, detect, respond) and the R&D Programs. This indicated a need for additional research, so a survey was completed in June 2022 of 151 adults in the USA general population. It revealed that the majority felt the SEC was doing a good job of providing cybersecurity guidance (e.g., via the Public Company Accounting Oversight Board) and enforcement. However, a significant number disagreed, indicating that the SEC could do a better job.