Federalizing Cybersecurity: Necessary or Nitwitted?
A cybersecurity bill may be filed in the U.S. Senate expanding government enforcement to the private sector. Security practitioners say more oversight of critical infrastructure wouldn't hurt. But anything more than that probably would.
» View Article
Federalizing Cybersecurity: Necessary or Nitwitted?
A cybersecurity bill may be filed in the U.S. Senate expanding government enforcement to the private sector. Security practitioners say more oversight of critical infrastructure wouldn't hurt. But anything more than that probably would.
» View Article
Federal oversight into Cyber Security is already in place for many utility providers. I work for one such company and we're required by Federal regulations to abide by standards that are quite difficult to achieve, especially since they're being updated often.
The biggest problem that I can see at this point is that the standards required don't always make sense to each individual organization. There are some Do's and Dont's that may or may not apply in each case, yet compliance is mandatory and fines are stiff.
The electrical industry already had standards in place dealing with this very subject. In the last few years, the Federal government has jumped into the pool and decided it will dictate what's best. It does this in the interest of protecting the Critical Infrastructure known as the electrical grid. Don't get me wrong, this is definitely an area needing protection. But if the industry was already policing itself, then why fix what wasn't broken?
It's no great leap to see that if the government considers the electrical grid as critical infrastructure and worthy of it's regulation, then that same path of logic (path-o-logic??) could easily see the web as critical infrastructure in as much as modern life depends upon it.
If regulation and compliance are pushed out to the corporate world, additional staffing for business and organizations to deal with compliance could force many small companies out of business if they aren't capable of supporting an IT staff. The amount of man-hours put into compliance here is staggering.
And of course, the last step in this would be for Congress to dictate what software you can run on your home computer. Can you say "We have assumed control!"
And of course, there is the little issue of the Fed's ability to even keep their own house clean!
Of course the Government would then have to create an agency to oversee the private sector as well. Just what we need, a bigger government.
Dirty Tricks: Social Engineers' Favorite Pickup Lines
Tabletop Exercises: 3 Sample Scenarios
19 Ways to Build Physical Security Into Your Data Center
Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
» More blogs
CSO Perspectives
Santa Clara, California
(ISC)2 members can earn up to 24 CPE Credits!
Trend Micro ranked #1 against real-world malware. Read more.
64-page prescriptive guide to security, compliance, and IT operations.
Removing Barriers To Better Server Virtualization Efficiency
Mining for Gold: Cybercrime Prevention and the Role of Log Management
The Executive Guide to Data Loss Prevention
Organizations can spend up to 50% more on compliance efforts than necessary.
White Paper: A Security Blueprint Delivered From within the Network
Read the RSA report: Security for Business Innovation
Upgrading to VMware vSphere with vWire
Explore the increasing importance of log management as cybercrime threats grow.
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
Implementing Best Practices for Web 2.0 Security
Five Ways to Reduce Your IT Audit Burden
THE IDG NETWORK