Congress should pass cybersecurity legislation that includes incentives for the private sector and creates an entity that promotes information-sharing, according to House Republican Cybersecurity Task Force recommendations (.pdf) unveiled Oct. 5.

Rep. Mac Thornberry (R-Texas), who headed the task force, outlined the recommendations during an Oct. 11 event at the Center for Strategic and International Studies in Washington, D.C.

"Congress should enact a menu of incentives to encourage cybersecurity to be a higher priority," Thornberry said, noting that "encouragement is better than mandates."

Incentives will help "elevate this issue in the consciousness of CEOs and businesses," he added.

For example, the task force recommends that Congress look into extending research and development tax credits to cyber investments and determine whether cybersecurity insurance can help increase security.

It also recommends Congress facilitate the creation of a non-government clearinghouse for information-sharing among businesses and the government.

Thornberry added that about 50 laws related to cybersecurity are not up-to-date with current technology and need revision.

At the CSIS event, Thornberry gave some of his own input. For example, he said that "anybody who gets a federal grant ought to have some sort of minimum level of cybersecurity." He also said that "basic hygiene" steps could eliminate the majority of malware.

House Republicans set up the task force in June to the dismay of some Democrats, who were excluded. "Cybersecurity is not one of those issues that has been partisan in the past, and there's no reason for it to be in the future," Thornberry said while explaining that because the eventual legislation will involve so many committees, Republicans needed to coordinate their efforts among themselves.

For more:
- watch video of the event at CSIS
- read the recommendations (.pdf)

Related Articles:
House Republicans stand up GOP-only cyber task force
'Cyber war? Not!' says U.K. professor
WikiLeaks inspires new White House cybersecurity policy
Cybersecurity policy must consider culture, says panel