NCJ Number
191007
Date Published
2001
Length
31 pages
Annotation
This document provides an overview of Federal information security and critical infrastructure protection.
Abstract
Poor information security could have potentially devastating implications for the country. Federal computer systems are riddled with weaknesses that continue to put critical operations and assets at risk. Federal agencies continue to have deficiencies in their entitywide security programs that are critical to their success in ensuring that risks are understood and that effective controls are selected and implemented. The new information security provisions will be a major catalyst for Federal agencies to improve their security program management. To help maintain the momentum that the new information security reform provisions have generated, Federal agencies must act quickly to implement strong security program management. A key element of strategy is establishing a national focal point for gathering information on threats and facilitating the Federal Government’s response to computer-based incidents. A variety of critical infrastructure protection efforts have been initiated that establish a foundation for future government wide efforts. However, the analytical and information-sharing capabilities are needed to protect the Nation’s critical infrastructures have not yet been achieved. Recommendations are to more fully define the role and responsibilities of the national focal point, develop plans for establishing analysis and warning capabilities, and formalize information-sharing relationships with private-sector and Federal entities. 22 notes