IT DRILLDOWN
 
NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 
 
 
LEADERSHIP
 
CIO Executive Programs
The Leader in Face-to-Face Education for Senior Executives

Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »

 
CIO Executive Council
A Peer-Advisory Service and Professional Association for CIOs

Portfolio Management Maturity Model at Chevron - Presentation & Discussion

November 13, 11:30 AM - 12:30 PM ET (GMT-4)

Janinne Franke, manager of strategy, planning & optimization at Chevron's corporate department & services, will share processes and lessons learned from developing and implementing the model.

Social Responsibility's Strategic Benefits

December 15, 11:30 AM - 12:30 PM US/Eastern (GMT-5)

Join Ed Granger-Happ, CIO of Save the Children, for a discussion of how creating an organization that is socially responsible improves staffing, retention, leadership development and overall corporate health.

More / Register »

Learn more about the CIO Executive Council »



 
 
RESOURCE CENTER
 
 
 
SUBSCRIBE TO CIO
 
Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

 
 

Washington Watch: Cybersecurity Strategy

 

November 15, 2002CIO

Cybersecurity Strategy: A Work in Progress

Richard Clarke didn’t want to create just another one of those reports that Washington churns out as easily as network TV cranks out new reality shows. But in trying to meet the impossible challenge of pleasing politicians, private industry and public users alike, that may be exactly what the president’s cybersecurity adviser has done. A 64-page document released in September, titled "The National Strategy to Secure Cyberspace," is less a strategy with specific action items than a list of best practices, recommendations and suggestions.

The good news is that it is a draft. In the past year, the White House has sponsored four town hall meetings around the country and published 53 sets of key questions to spark public debate. But Clarke and strategy coauthor Howard Schmidt, vice chair of President Bush’s Critical Infrastructure Protection Board, claim they need even more input before a final strategy is produced.

Jim Dempsey, deputy director with the Washington, D.C.-based Center for Democracy and Technology, a pro-civil liberties lobbying group, believes the strategy might not have sufficient incentives for private industry to act, but he’s not sure where the pressure to be secure should come from. "I think [the government] correctly recognized that they could not take a regulatory approach, but that still leaves open the question of whether we in society have the right mix of incentives for security," says Dempsey.

If government and private industry are unable to agree on security needs and mandates, the future security of cyberspace is in jeopardy, says RSA Security President and CEO Arthur Coviello. "I was a little disappointed that it was just a draft, but now people can debate it. The government has the opportunity to lead by example, to put their money where their mouth is," he says.

The White House is planning eight more town hall meetings and is accepting comments until Nov. 18 via e-mail at feed back@cybersecurity.gov. No date has been set for the final release of the guidelines, but as the draft strategy ironically argues, "good intentions and good beginnings are not the measure of success. Rather, the government will require demonstrated performance and results." For a copy of the cybersecurity strategy, go to www.white house.gov/nsc/nss.html.

-Julie Hanson

New Rules for Imports Will Save Supply Chain Costs

The government is going to help make your supply chain more efficient. Now stifle that laugh. U.S. Customs regulations proposed in August require data about imports to be reported to the Customs agency 24 hours before the goods are loaded on any ship bound for the United States. That means you and your supply chain partners will have to share more information online. And it will save you money.

Loading...
 
 
CENTER OF EXCELLENCE
 
Security
» Prudential Financial Protects its Brand with Symantec Data Loss Prevention Solutions
FORTUNE 100 insurance leaders rely on the Symantec Data Loss Prevention solution to protect sensitive customer data.
» Information Security: Data Drains and How to Prevent Loss
Do you know where your confidential data is, where it is going, and how to prevent it from leaving your organization.
» Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands
Learn what the thought-leaders at PricewaterhouseCoopers have to say on the risks associated with data security.
» 7 Requirements of Data Loss Prevention
Incorporate best practices from many companies using DLP solutions as you establish your organization's requirements and safeguard confidential data.
» Ponemon Study: How Much Does a Data Breach "Cost"?
35 U.S. organizations that lost confidential information and had a regulatory requirement to publicly notify affected individuals are studied in this report.
Center sponsored by

 
 
ABCs
 

Just the basics, please. Sometimes we all need a refresher or we need to make sure our team and our colleagues are all on the same page.

Over 25 tutorials on everything from business intelligence to virtualization.

 
 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Laptop Security: Where Do CIOs See Weaknesses?

Achieve a 50:1 Data Deduplication Ratio

Ponemon Study: How Much Does a Data Breach "Cost"?

Revolutionizing Endpoint Security with a Single Agent

Examine security implementations based on six key criteria.

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Information Security: Data Drains and How to Prevent Loss

Prudential Financial Protects its Brand with Symantec

Solving Online Credit Fraud Using Device Reputation

Learn how companies are changing how they reach out to their most profitable customers.

Learn how to leverage virtualization for a 74% savings in TCO.

Find out how you can affordably consolidate applications with VMware.

Discover what you need to consider when evaluating virtualization.

Save with 0% Lease Offer on HP Servers and Storage

How RFID Improves Data Center Efficiency

Find out how to manage virtualization's risks and reap the rewards.

Conquer the realities of managing virtualization

Improve Web-Enabled SAP Performance

Remote Infrastructure Management - What Your Peers are Thinking

Complementary BI: The New Approach to Business Intelligence

5 Steps to Successful IT Consolidation

Effective Security with a Continuous Approach to ISO 27001 Compliance

High-performance computing is no longer just for Big Business

Optimizing Infrastructure Control

Configuration Assessment: Choosing the Right Solution

Gartner on Data Deduplication Cost Savings

Data Protection Options Explained

Check Point Endpoint Security - Unifying Essential Components

File Integrity Monitoring: Secure Your Virtual and Physical IT Environments

Unified Communications & Collaboration: Game-Changing Business Results

7 Requirements of Data Loss Prevention

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

The Case for Business Software Assurance ~ Securing Your Applications

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

The Right and Wrong Master Data Management Strategies to Start Small and Grow Big

Find out why IDC thinks virtualization is changing operating environments.

Explore the impact virtualization can have on your bottom-line.

ESG Research on Server and Storage Virtualization

Data Center ROI with RFID Asset Tracking

Get help navigating the management challenges of virtualization.

Narrow the gap between virtualization's benefits and the management risks.

Cash in on the promise of virtualization

Determine the ROI of Web Application Acceleration Managed Services

Webcast - "Into the Wild: Managing Laptops Outside the Office"

Data Protection: Challenges for the Traveling User

Optimizing Infrastructure Control

Expand High-Performance Computing (HPC) Capabilities

Power the Platform of Choice for Virtualization in the Enterprise

Effective Security with a Continuous Approach to ISO 27001 Compliance

Leading university calls on Nokia for mobile unified communications.