White House cyber-security plan cites big threats, offers little action

Sep 23, 2002 - © Alan Kotok

For example, the report says the public/private partnership should, as a top priority, develop best practices and new technology to increase the security of control systems used in utilities and manufacturing networks, and while those innovations are being developed, owners of power grids and pipelines should "closely examine the risks of Internet connections and take appropriate actions."

The report says public/private partnerships should also identify interdependencies, and develop plans to reduce vulnerabilities. It says states should consider Cyber Corps scholarship for service programs. The document recommends that the federal Chief Information Officers (CIO) Council should consider establishing a Cyberspace Academy linking IT security and forensics programs. IT security officials, according to the report, should "explore approaches to and the feasibility of" a recognized certification program in cyber-security.

Under a section called Federal leadership, the report calls for program reviews, studies, and determinations, but no concrete deadlines for actions to secure agency systems and networks. To establish a comprehensive analysis and warning capability, the report says the law enforcement and national security communities should develop a system to detect a national cyber attack and plan for a response. But other steps are expressed in voluntary terms, with even a proposal for a Cyberspace Network Operations Center (managed by the private sector) couched in terms of an idea for private companies to consider, with federal agencies encouraged to explore ways of cooperating with it.

The report is a draft, with comments accepted through 18 November 2002. My recommendation to the Board would be to remove every use of the word 'consider' and replace every use of the word 'should' and with 'will'. Then, the report should set deadlines for companies and agencies to comply with steps to tighten security. Private companies and agencies used this approach for Y2K and had success. Why not do it again?

Net Privacy: A Guide to Developing & Implementing an Ironclad ebusiness Privacy Plan

Electronic customer intelligence gathering has been perceived as a major advantage of doing business online. Yet, according to a recent Business Week poll, 92% of Internet users are uncomfortable with the practice of ebusinesses selling their personal information to other businesses. In this timely guide, two acknowledged experts on the subject arm companies that do business online with a complete blueprint for developing and implementing a privacy plan that satisfies their customers' desire for privacy while

The copyright of the article White House cyber-security plan cites big threats, offers little action in Technology & U.S. Politics is owned by Alan Kotok. Permission to republish White House cyber-security plan cites big threats, offers little action in print or online must be granted by the author in writing.

Go To Page: 1 2 3

Articles in this Topic Discussions in this Topic