Dr. James Lerums from Purdue University delivered an insightful talk on Developing a Public/Private Cybersecurity Scorecard on 30 January. The session addressed critical challenges in cybersecurity, particularly in the context of safeguarding essential infrastructure, and offered practical frameworks for assessment and improvement.

Accelerating Cybersecurity for Critical Infrastructure
Dr. Lerums discussed operational strategies to rapidly strengthen cybersecurity in critical infrastructure sectors such as energy, transportation, manufacturing, and water utilities. He emphasized the importance of aligning procedures, training, and leadership to reduce vulnerabilities and prevent potentially catastrophic disruptions to industrial control systems.

The Ethics of “Hacking Back”
The talk also examined the ethical dimensions of active cyber defense, drawing on both law enforcement and military frameworks. Dr. Lerums explored the contentious practice of “hacking back,” outlining the ethical and legal considerations involved in responding to persistent cyber threats.

Developing a Public/Private Cybersecurity Scorecard
A key highlight of the session was Dr. Lerums’ research on developing user-friendly cybersecurity scorecards for public and private organizations. Designed for non-experts, these tools enable organizations to self-assess their cybersecurity posture and identify areas for improvement. The scorecard has been successfully implemented in the State of Indiana and facilitates comparative analysis across sectors.

Dr. Lerums is a graduate faculty member in the Computer Information and Technology Department at Purdue University and a Scholar at the Center of Education and Research in Information Assurance and Security. With over three decades of experience across academia, industry, and military service—including his tenure as a Colonel in the US Army—he brings extensive expertise in cybersecurity operations, information assurance, and the strategic implementation of security solutions.

 January 2026