Columns
FERET: VA’s proactive solution for data breach analysis
April 19th, 2008
Following the May 2006 incident involving the theft of a U.S. Department of Veterans Affairs (VA) laptop computer, it was clear that we had a need for a formal process for evaluating and responding to data breach incidents. Using BMC Software’s development tool, the VA has built an infrastructure to document privacy and security incidents via the enterprise deployment of applications such as the PVTS (Privacy Tracking System) and VA-NSOC (VA Network Security Operations Center).
HSPD-12 smart cards offer a world of possibilities
April 18th, 2008
Homeland Security Presidential Directive-12 (HSPD-12) was created to eliminate variations across government agencies in the quality and security of identity credentials used to gain access to federal facilities and resources. But that’s only the be-ginning of how these new credentials will help transform the way government does business.
Securing government communications with ECC
April 17th, 2008
In recent years, government organizations, like everyone else, have embraced the reality of data mobility. Agencies are increasing the use of smart phones, laptops and USB drives, but in many cases, they face the need to upgrade the security of their communications to meet the growing technical sophistication of hackers and intruders. As government communications become more and more networked, the range of devices that can access these networks has grown, and so has the need for better security.
State of affairs: Incidents at federal agencies place sensitive information and systems at risk
April 16th, 2008
The following worrisome IT Security incidents at government offices were described by Gregory Wilshusen, the director of information security issues for the Government Accountability Office (GAO), during his testimony last month before subcommittees of the House Committee on Oversight and Government Reform.
Reinventing government by managing information risk
April 15th, 2008
Since Al Gore first spoke of "reinventing government" in March of 1993, government organizations at all levels have wrestled with a long list of challenges borne of the possibilities presented by new technologies. The promise of these technologies is inspiring and extraordinary: deliver better service and increase satisfaction for citizens and adjacent organizations alike, while dramatically increasing overall operational efficiency. Yet, the reality can be daunting as organizations seek to capitalize the infrastructure, build new policy, develop new processes, execute initiatives with an existing -- often under-trained -- workforce, and ensure the security and privacy of citizens.
Halt! Who Goes There?
March 26th, 2008
Since 9/11, America’s concerns about security have given rise to many credentialing mandates. The Homeland Security Presidential Directive (HSPD-12) continues to roll-out, requiring up to 20 million federal employees and civilian contractors to obtain Common Access Cards (CACs) annually. In every location globally, the sheer magnitude of applying for these cards presents formidable hurdles to officials charged with implementation.
Don’t Get (TIC)ked-off -- Implementing TIC, the Trusted Internet Connection initiative
March 13th, 2008
In November 2007, the Office of Management and Budget (OMB) issued a memo on the implementation of Trusted Internet Connections (TIC). The TIC initiative calls for federal agencies to consolidate to a target of 50 Internet points of presence (POPs) across the Federal government.
Government and industry united in battle on cyber crime
February 13th, 2008
With a single keystroke, a coordinated cyber attack is launched on the U.S. Public infrastructure, communications, government and military networks all fall victim to a sophisticated adversary wielding stealthy malicious code. In the control center, red lights are flashing, but no warning can be made. The enemy has taken over all networked communications.
