Cyberspace Policy Review - Revision history

WikiSysop: /* Additional Notes and Highlights */

2010-08-09T19:40:53Z

Additional Notes and Highlights

← Older revision		Revision as of 19:40, 9 August 2010
Line 98:		Line 98:

	==Additional Notes and Highlights==		==Additional Notes and Highlights==
			Expertise Required: None

	[http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]		[http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]

Jalbert: /* Key Words */

2010-07-30T16:24:51Z

Key Words

← Older revision		Revision as of 16:24, 30 July 2010
Line 14:		Line 14:
	* Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[International Cooperation]]		* Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[International Cooperation]]

	==Key Words==		==Key Words==


			''insert key words here''

	==Synopsis==		==Synopsis==

Jalbert: /* Categorization */

2010-07-30T16:20:06Z

Categorization

← Older revision		Revision as of 16:20, 30 July 2010
Line 12:		Line 12:
	* Resource by Type: [[US Government Reports and Documents]]		* Resource by Type: [[US Government Reports and Documents]]
	* Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]		* Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]
	* Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[~~Government~~ Cooperation]]		* Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[International Cooperation]]

	==Key Words==		==Key Words==

Jalbert: /* Categorization */

2010-07-30T16:19:56Z

Categorization

← Older revision		Revision as of 16:19, 30 July 2010
Line 9:		Line 9:

	==Categorization==		==Categorization==

	* Resource by Type: [[US Government Reports and Documents]]		* Resource by Type: [[US Government Reports and Documents]]
			* Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]
			* Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[Government Cooperation]]

	==Key Words==		==Key Words==

Jalbert: /* Synopsis */

2010-07-30T16:17:18Z

Synopsis

Jalbert: /* Synopsis */

2010-07-30T16:16:26Z

Synopsis

← Older revision		Revision as of 16:16, 30 July 2010
Line 61:		Line 61:

	'''The Near-Term Plan:'''		'''The Near-Term Plan:'''



	*1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.		*1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.
Line 74:		Line 72:
	*9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.		*9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.
	*10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation.		*10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation.


	'''The Mid-Term Plan'''		'''The Mid-Term Plan'''

Jalbert: /* Synopsis */

2010-07-30T16:15:58Z

Synopsis

@@ Line 16: / Line 16: @@
 ==Synopsis==
 Selection from the Executive Summary:
-The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions
+'''Selection from the Executive Summary:'''
 to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.
 ==Additional Notes and Highlights==
 [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]

Jalbert: /* Additional Notes and Highlights */

2010-07-30T15:35:00Z

Additional Notes and Highlights

← Older revision		Revision as of 15:35, 30 July 2010
Line 22:		Line 22:
	==Additional Notes and Highlights==		==Additional Notes and Highlights==

	[http://global.bsa.org/cybersecuritydashboard/ \| Cyberspace Policy Review Dashboard]		[http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]

Jalbert at 15:34, 30 July 2010

2010-07-30T15:34:39Z

← Older revision		Revision as of 15:34, 30 July 2010
Line 21:		Line 21:

	==Additional Notes and Highlights==		==Additional Notes and Highlights==

			[http://global.bsa.org/cybersecuritydashboard/ \| Cyberspace Policy Review Dashboard]

WikiSysop: /* Categorization */

2010-07-23T20:19:32Z

Categorization

← Older revision		Revision as of 20:19, 23 July 2010
Line 9:		Line 9:

	==Categorization==		==Categorization==
	* ~~Resources~~ by Type: [[US Government Reports and Documents]]		* Resource by Type: [[US Government Reports and Documents]]

	==Key Words==		==Key Words==

← Older revision		Revision as of 16:17, 30 July 2010
Line 38:		Line 38:

	'''"Building Capacity for a Digital Nation"'''		'''"Building Capacity for a Digital Nation"'''

	In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector.		In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector.

	'''"Sharing Responsibility for Cybersecurity"'''		'''"Sharing Responsibility for Cybersecurity"'''

	In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security.		In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security.

	'''International Cooperation'''		'''International Cooperation'''

	The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices.		The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices.

	'''"Creating Effective Information Sharing and Incident Response"'''		'''"Creating Effective Information Sharing and Incident Response"'''

	The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the "Leadership from the Top" section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident.		The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the "Leadership from the Top" section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident.

	'''"Encouraging Innovation"'''		'''"Encouraging Innovation"'''

	The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security.		The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security.

Line 56:		Line 61:
	Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities.		Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities.


	The report concludes with two forms of action plans, a near-term plan and a mid-term plan.		The report concludes with two forms of action plans, a near-term plan and a mid-term plan.


	'''The Near-Term Plan:'''		'''The Near-Term Plan:'''
Line 72:		Line 75:
	*9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.		*9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.
	*10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation.		*10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation.


	'''The Mid-Term Plan'''		'''The Mid-Term Plan'''