Cyber Policy Recommendations For The Federal Government
Download as PPT, PDF1 like417 views
The document outlines several recommendations for improving US cybersecurity policy. It recommends that the federal government lead by example in securely managing all government systems and using its acquisition powers to improve security tools for all. It also recommends preserving the public-private partnership by limiting new legislation and regulations to only critical government infrastructure, addressing private sector concerns, and improving information sharing processes under existing laws. The overall goal is for coordinated public and private sector actions to successfully protect critical US assets from cyber attacks, which pose a major risk to national security.
Cyber Policy Recommendations For The Federal Government
- 1. Cyberspace Security Policy Recommendations Marcus H. Sachs, P.E. National Security and Cyber Policy Verizon
- 2. Federal Cyber Security Policy Priorities Organized cyber attacks pose a significant risk to the national and economic security of the United States; however: Nearly all intrusions are preventable Coordinated actions by both the public and private sectors can successfully protect critical American assets Policy makers should focus on leveraging governmental resources to advance cyber security goals While also creating incentives for the private sector to do the same
- 3. The Federal Government Must Lead By Example Set the “gold standard” by managing ALL government systems in a secure manner that can be duplicated .mil, .gov, and beyond Use acquisition powers to improve everybody’s ability to secure cyberspace Be an early adopter of new security tools Lowers the cost for the private sector Develop a career field for government cyberspace professionals, from initial entry all the way to SES Security is all about the people, not the technology Look at cyberspace security through the lens of economics rather than just military offense/defense
- 4. Preserve the Public-Private Partnership in Cyberspace Limit legislation and Presidential authority to the government’s critical infrastructures only Only include private sector infrastructure if it directly supports the government Any legislation or regulation must address liability, confidentiality, cost, legal conflicts, and other legitimate private sector concerns Terminology must be consistent (i.e., the definition of “cyberspace”) Existing laws such as the ECPA or Patriot Act must be examined to improve the information sharing process