The first thing that we must have in order to address this “short arm” of predictive knowledge when it comes to the development of cyber-policy, is putting those knowledgeable and qualified to understand and discuss such topics in the position of policy development because of the dynamic nature of what we’re talking about. Over the past two years the heads of several of the worlds largest tech companies have been called to Congress to testify on various topics, some more than once, and the number of cringe worthy discussions and questions was too many to count. Once we have the right people in place that understand the dynamic nature of the changing landscape, the best approach is to create policy that addresses the issue on more than one front. You need first a higher level, more encompassing long term strategy that addresses some of the basic tenements of cyber policy. Long term visions, goals and framework to work to achieve those goals. Then in addition to that you need to adopt a more flexible policy that gives policy makers the authority to change said policy as needed with whatever cadence that may be necessary. For example if one of the longer term goals of your over arching cyber policy is to reduce the disruption in services that cause great financial or societal distress, then you could then empower your policy makers to evaluate any new threats to that long term goal as soon as they are identified and understood. Sometimes the processes especially within government to take immediate and corrective action to things falls well short of effective in the time that it is needed to implement. This strategy of enabling your policy makers to make more immediate changes to policy once a certain threshold of knowledge is crossed would eliminate that red tape and enable a more effective cyber policy. Then lastly your approach needs to put processes in place to evaluate the effectiveness of some of the policy changes that were made with haste. I don’t think you ever in this expedited fashion we’re dealing with the short arm of predictive knowledge do you want to eliminate the need for checks and balances. Yes we want to empower knowledgeable policy makers to take corrective action as needed while eliminating red tape, but we don’t ever want to eliminate the need to evaluate the effectiveness of those policy changes and if needed update them with the same speed in which they were implemented to make them as effective as possible.