Recommended Reading

Events

All Content

Article

Sep 27, 2023

Kink in the chain: Eight perspectives on software supply chain risk management

By <span class="gta-embed--tax--expert gta-post-embed--tax--expert" >Cyber Statecraft Initiative</span>

Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers can help protect against them.

Cybersecurity United States and Canada

Trackers and Data Visualizations

Sep 27, 2023

Software supply chain security: The dataset

By <span class="gta-embed--tax--expert gta-post-embed--tax--expert" >Will Loomis, Stewart Scott, Trey Herr, Sara Ann Brackett, Nancy Messieh, and June Lee</span>

Want to dive deeper into the Breaking Trust database? You have come to the right place.

Cybersecurity United States and Canada

In-Depth Research & Reports

Jul 18, 2023

The National Cybersecurity Strategy Implementation Plan: A CSI Markup

By <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Trey Herr</span>, <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Stewart Scott</span>, <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Maia Hamin</span>, <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Will Loomis</span>, <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Sara Ann Brackett</span>, <span class="gta-embed--tax--expert gta-post-embed--tax--expert">Jennifer Lin</span>

On July 13, the White House released the Implementation Plan for the 2023 US National Cybersecurity Strategy. Read along with CSI staff, fellows, and experts for commentary and what the NCSIP means for the Strategy.

Cyber Strategy Cybersecurity

Will Loomis is a nonresident fellow with the Cyber Statecraft Initiative, part of the Atlantic Council Technology Programs. He is also a risk and resilience advisor in the Office of the Chief Security Officer at Berkshire Hathaway Energy.

Loomis previously served as a senior policy advisor at the Cybersecurity and Infrastructure Security Agency, where he led the agency’s policy work on critical infrastructure security and resilience and offensive cyber operations. Before that, he was an associate director with the Cyber Statecraft Initiative, where he led the program’s work on critical infrastructure cybersecurity and software supply chain risk management. He was also formerly the chair of Young Professionals in Foreign Policy’s Cybersecurity Policy & Technology Discussion Group and an organizer for policy at the DEF CON hacking conference.

Originally from New York, he holds a BA in political science, with a focus on international relations and securities studies from Colgate University. He is also a certified bourbon steward.