FC: Feds face "pervasive weakness" in homeland IT security, GAO says

From: Declan McCullagh (declanat_private)
Date: Wed Jul 10 2002 - 22:26:08 PDT

  • Next message: Declan McCullagh: "FC: A new domain name dispute low: Unix.org loses name to X/Open"

    ---
    
    Date: Wed, 10 Jul 2002 18:32:39 -0400
    From: Mich Kabay <mkabayat_private>
    Subject: GAO Critical Infrastructure Protection report
    Sender: Mich Kabay <mkabayat_private>
    
    -----BEGIN PGP SIGNED MESSAGE-----
    
    Critical Infrastructure Protection: Significant Homeland Security
    Challenges Need to Be Addressed"
    
    < http://www.gao.gov/new.items/d02918t.pdf >
    
    by Robert F. Dacey
    Director, Information Security Issues
    U.S. General Accounting Office
    
    Released Tuesday 9 July 2002
    
    Testimony presented before the Subcommittee on Oversight and
    Investigations,
    Committee on Energy and Commerce,
    U.S. House of Representatives
    
    
    Highlights (quoted from document):
    
    As proposed, the functions of the Information Analysis and
    Infrastructure Protection division would include receiving and
    analyzing law enforcement and intelligence information, assessing
    cyber and physical vulnerabilities of critical infrastructures, and
    taking measures to protect them.
    
    The consolidation of these six organizations into a single division,
    if properly implemented, could result in combining similar functions,
    thereby avoiding duplication and possibly creating more robust
    capabilities. For example, analysis and warning of cyber incidents is
    currently performed by both the National Infrastructure Protection
    Center and the Federal Computer Incident Response Center. However,
    prior GAO work has identified and made recommendations concerning
    several critical infrastructure protection challenges that need to be
    addressed, which would face the new department. Specifically, they
    are:
    *  Developing a national critical infrastructure protection strategy.
    *  Improving analytical and warning capabilities.
    *  Improving information sharing.
    *  Addressing pervasive weaknesses in federal information security.
    
    
    
    M. E. Kabay, PhD, CISSP -- AssocProf Information Assurance
    Dept CompInfoSys, Norwich University, Northfield VT
    http://www2.norwich.edu/mkabay/index.htm
    
    -----BEGIN PGP SIGNATURE-----
    Version: PGP Personal Privacy 6.5.8
    Comment: Digital signatures increase security for everyone.
    
    iQB1AwUBPSys+zPd6/an40lzAQHtsgL/Su4k8E9ML3cTP9XFuI1yXp+h6JqxTvJV
    ZYyPTIxBuaRYnv3P3ySnIoKW/4MgVkE71zglv487emUNF7udJ8GjVuP3lrRPmWyZ
    cxx811Y1nFcqASLXZeboWwCgxfsHHybO
    =ZFMU
    -----END PGP SIGNATURE-----
    
    
    
    
    -------------------------------------------------------------------------
    POLITECH -- Declan McCullagh's politics and technology mailing list
    You may redistribute this message freely if you include this notice.
    To subscribe to Politech: http://www.politechbot.com/info/subscribe.html
    This message is archived at http://www.politechbot.com/
    Declan McCullagh's photographs are at http://www.mccullagh.org/
    -------------------------------------------------------------------------
    Like Politech? Make a donation here: http://www.politechbot.com/donate/
    -------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Wed Jul 10 2002 - 23:58:44 PDT