Josephine Wolff

My book "Cyberinsurance Policy: Rethinking Risk in an Age of Ransomware, Computer Fraud, Data Breaches, and Cyberattacks" is out today! mitpress.mit.edu/9780262544184/…

In a new piece for @law_ai, @josephinecwolff & I explain why California was right to prioritize transparency over liability in S.B. 53, which was just signed into law and requires large AI companies to report risks and safeguards for their systems.law-ai.org/the-limits-of-…

🚨 New on @lawfare : @josephinecwolff & I argue that the push to impose liability on AI companies won’t make AI safer—because insurers, not courts, will shape how liability plays out. And history from cyber insurance shows insurers don’t incentivize real safety.

Professor @josephinecwolff reflects on the joys of wandering around Japanese notebook stores while in Tokyo for the Workshop on the Economics of Information Security at the University of Tokyo. @HitachiCenter ft.com/content/062884…

Congratulations to Professor @josephinecwolff, winner of the Kulp-Wright Book Award from @ARIArisk! #CybersecurityAwarenessMonth

#CyberAttack on hospitals and healthcare institutions are rising. @josephinecwolff of @FletcherSchool @TuftsUniversity explains why, and the financial and patient-care effects of these attacks in @EconoFactOrg econofact.org/the-cybersecur…

@IelTop @cybersimplesec @ollieatnowhere @daveaitel Excited to read your paper more carefully @cybersimplesec, my initial fear (just from skimming the intro) would be that the security auditing industry is pretty uneven at this point and might give rise to a not-terribly-robust certification scheme

@IelTop @cybersimplesec @ollieatnowhere @daveaitel Definitely true that I'm interested in a range of types of insurance that cover cyber-related incidents, not just standalone cyberinsurance (and that there have been fewer disputes over standalone policies, but I suspect that's partly because they tend to offer less coverage?)

Has anyone else read this paper on having certifications (aka SOC-2) provide a safe harbor against software liabilities by @cybersimplesec or am I the only one who thinks this idea is absolutely crazy? lawfaremedia.org/article/will-a…

Who should pay for massive, state-sponsored cyberattacks that cause billions of dollars’ worth of damage? @schneierblog and @josephinecwolff evaluate a potential federal cyber insurance backstop. lawfaremedia.org/article/buildi…

@ARozenshtein @UofMNLawSchool The best news! Congratulations!!

I am delighted to report that my colleagues at @UofMNLawSchool have voted to grant me tenure—a wonderful way to end the year! law.umn.edu/news/2023-12-1…

It’s time for my list of the best information security books of 2023. Includes titles by @schneierblog, @stiennon, @theRealSpaf, @josephinecwolff, @spacerog. The book of the year is ‘A Hacker’s Mind’ by Brice Schneier. #infosec brothke.medium.com/the-best-infor…

📢 new publication online On the role of cyber-insurance policies vis-a-vis states in the #cyberspace, read @josephinecwolff as part of a forthcoming special issue on #cyber 👉 …ndfonline-com.pucdechile.idm.oclc.org/doi/full/10.10…

The @FletcherSchool is hiring an assistant professor in cyber/AI policy! Apply here by Dec. 1: apply.interfolio.com/136236

Great to see our edited volume on multistakeholder cyber diplomacy out in print, and available OA on Elgar's website. A 🧵 on the book chapters: e-elgar.com/shop/usd/build…

Excited that my article w/ @josephinecwolff & @IelTop, How Privilege Undermines Cybersecurity, has now officially been published in the Harvard Journal of Law and Technology. Many thanks to the @HarvardJOLT editors for their great work on the piece! jolt.law.harvard.edu/assets/article…

Check out this great write-up of my research w/ @josephinecwolff & @IelTop , forthcoming in @HarvardJOLT, showing how lawyers' efforts to preserve confidentiality in the wake of a cyber-breach can undermine long-term cybersecurity. law.com/corpcounsel/20…

Our @USENIXSecurity paper on how lawyers and insurers impact incident response is up!

Ahead of their 2023 Cyber Risk Summit, @NetDiligence caught up with Professor @josephinecwolff to learn more about what she’s working on, current trends in the industry, and why “best practices” are not always the best. netdiligence.com/blog/2023/05/t…

@WestmorelandATL @Princeton @PrincetonHist @KevinMKruse @MARTAtransit aww, baby thesis!

Back on @Princeton campus tonite for @PrincetonHist alumni panel about what one can do w/ a History degree. Caught up w/ my old prof and adviser @KevinMKruse. Result: Nostalgia about penning a 2010 senior thesis on @MARTAtransit. Decided to pull it up. Grateful for this place.

Thrilled to be organizing a third Cybersecurity Law and Policy Scholars Conference on Sept. 29-30, 2023, at Tufts with @ARozenshtein @cybersimplesec @GusHurwitz @jkosseff and @BryanHChoi Submit by May 15! clpsc.org/call-for-papers