White House Cybersecurity report: Making the Internet safe will require time and patience
Bearing the title,”Cyberspace Poicy Review,” and just 38 pages long (if you don’t count the appendices), the long-awaited preview of how the federal government is going to secure cyberspace was finally released at the President’s White House speech today. (I was actually handed a copy in the East Room 20 minutes before its official release time and then asked to return my copy until that time, 10:45 am EDT, arrived.)
While I haven’t had time to read through the report in its entirety, here are some key points from it that the President stressed in his speech:
- The status quo is no longer acceptable. The US must signal to the world that it is serious about addressing the challenge of cyber security.
- “Ad hoc responses will not do.” (That’s a direct quote from Obama’s speech). The President said the country cannot continue to react to cyber crime on a piecemeal, incident-by-incident basis; it must become proactive, organized, and partner with other nations.
- There will be accountability. The President promised that milestones and “performance” metrics will be used to ensure that goals are met.
- Although public/private partnerships will be pursued, there will be no monitoring of private sector networks or Internet traffic. There will be a strong commitment to privacy and civil liberties.
The report itself contains two lists of action plans, one near-term and one mid-term.
The 10 near term actions listed include developing an updated strategy to secure the country’s information infrastructure; designate a privacy and civil liberties official on the National Security Council; initiate a national public awareness and education campaign to promote cybersecurity; and prepare a cybersecurity incident response plan before, rather than after, a major attack occurs.
The 14 mid-term actions listed include improving the process for resolving interagency disagreements; expanding support for research and development; and developing a process between he government and private sector to assist in preventing, detecting, and responding to cyber incidents.
Clearly there’s much work to be done, and the President made clear today that he expects it will take years and lots of challenging effort to complete it. We are only at the beginning, he said, comparing a major transformation like this to movements such as the agricultural and industrial revolutions, which took long periods of time.
On Monday, a panel of top cybersecurity and intelligence experts will provide their analysis of the report. We’ll be covering that event as well, so look for an update then.
The full report is available at: http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf (Adobe Acroba required) —Jeff Fox
