# Security standards lag behind modern threats

> Old security rules fail to protect against today's digital risks.
- Title: Security standards lag behind modern threats · Newsweek
- Summary: Old security rules fail to protect against today's digital risks. Rigid security standards that check boxes without addressing real threats leave critical…
- Keywords: security standards, cybersecurity, government agencies, defense contractors, federal risk assessment, community water systems, environmental protection agency, quantum computing, Security, standards, lag, behind
- Source: Newsweek — https://newsweek.com/security-standards-must-track-evolving-threats-costs-12618462
- Published: 2026-10-26T13:00:32+00:00
- Read time: 1 min
- Topics: security standards, cybersecurity, government agencies, defense contractors, federal risk assessment, community water systems, environmental protection agency, ai, 5g, quantum computing
## Security policy pattern
American security policy followed a pattern of threat emergence, policy creation, funding, and deployment for decades.
## Modern threats outpace standards
Technological advancements like ai, open-source intelligence, 5g, drones, encryption, and quantum computing reshape security risks faster than standards can adapt.
## Water systems compliance issue
In May 2024, the EPA reported over 70 percent of community water systems failed federal risk-assessment and emergency-planning requirements.
## Outdated standards cause problems
Existing security standards were built for old adversaries and focus on checking boxes rather than addressing modern digital threats.
## Small contractors face unfair costs
Meeting standards designed for large companies forces small contractors to spend thousands on irrelevant compliance measures.
## Fix requires flexible standards
Security standards must be reviewed monthly with threat intelligence and technical experts to ensure they stop real threats without excessive costs.
## Consequence of inaction
Failure to update security standards risks widespread system disruption and irreversible data breaches affecting critical national infrastructure.
## Key takeaway

Rigid security standards that check boxes without addressing real threats leave critical systems vulnerable to modern cyber risks.