The United States Department of Homeland Security announced on February 3, 2022 the formation of a 15 person Cyber Safety Review Board, (the “CSRB”), which will be led by Robert Silvers, the Department of Homeland Security Under Secretary for Policy, as the Chair of the CSRB, and by Heather Adkins, the Senior Director for Security Engineering at Google, as Deputy Chair of the CSRB. The creation of the CSRB was mandated by President Biden’s Executive Order #14028 entitled Improving the Nation’s Cybersecurity, which was issued on May 12, 2021. The Cybersecurity and Infrastructure Security Agency (“CISA”), which is part of the Department of Homeland Security, is tasked with managing, supporting, and funding the CSRB. The CSRB website address is here.

Jen Easterly, the Director of CISA, and CSRB Chair Robert Silvers have named 13 cyber leaders from the federal government and the private sectors who will serve on the CSRB with Chair Silvers and Deputy Chair Adkins:

• Dmitri Alperovitch – Co-Founder and Chair, Silverado Policy Accelerator, Co-Founder and former CTO of Crowdstrike
• John Carlin – Principal Associate Deputy Attorney General, Department of Justice
• Chris DeRusha – Federal Chief Information Security Officer, Office of Management and Budget
• Chris Inglis – National Cyber Director, Office of National Cyber Director
• Rob Joyce – Director of Cybersecurity, US National Security Agency
• Katie Moussouris – Founder and CEO, Luta Security
• David Mussington – Executive Assistant Director for Infrastructure Security, CISA
• Chris Novak – Co-Founder and Managing Director, Verizon Threat Research Advisory Center
• Tony Sager – Senior Vice President and Chief Evangelist, Center for Internet Security
• John Sherman – Chief Information Officer, Department of Defense
• Bryan Vorndran – Assistant Director, Cyber Division, Federal Bureau of Investigation
• Kemba Walden – Assistant General Counsel, Digital Crimes Unit, Microsoft
• Wendi Whitmore – Senior Vice President, Unit 42, Palo Alto Networks

The CSRB is a public-private initiative combining federal government and industry leaders to improve protection of the nation’s infrastructure and networks. The initial meeting of the CSRB is expected to focus on the vulnerabilities of the Log4j software library. President Biden’s Executive Order #14028 calls for the CSRB to issue its initial report by May 2022.