![](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/02\/gettyimages-634133704.jpg?w=738\")
<\/p>\n<\/p>\n
Bob Ackerman<\/span> Contributor<\/span><\/p>\n<\/p><\/div>\n A significant piece of cybersecurity news erupted\u00a0last week<\/a>, although it was nearly drowned out<\/a> by the growing flap<\/a> over President Trump\u2019s firing of FBI Director James Comey<\/a>.<\/p>\n There are\u00a0two overriding points\u00a0regarding President Trump\u2019s executive order (EO) outlining plans to improve data security for federal agencies and to better protect critical U.S. infrastructure.<\/p>\n No. 1, this development was truly important \u2014 a serious call to action to beef up government cybersecurity measures at a time when breaches dominate the headlines and mounting worries about a future cyber war among nation-states are legitimate. No. 2, while this executive branch step was absolutely necessary, it is insufficient. We need to go much further.<\/p>\n * The EO\u2019s call for federal government agencies \u2013 especially civilian agencies \u2013 to seek opportunities to share cyber technology makes a great deal of sense.<\/strong><\/p>\n Why reinvent the wheel, one government silo at a time? Eventually, this would spell disaster. And cloud-based computing and security frameworks available today make a holistic approach eminently possible.<\/p>\n Data security frameworks would then be layered atop the cloud framework so that data can be shared while also encrypted. Individual agencies could then build on this framework for any number of unique needs.<\/p>\n I know that government silos have varying degrees of expertise, resources and sophistication and are likely to embrace the counter-argument that they should largely remain silos. But security is only as strong as the weakest link<\/a> in the network. If addressed, adversaries will find and exploit that link. In a large corporation, information technology requirements are not left to each function or department. Why should the government be different?<\/p>\n * We need a mechanism in which cybersecurity experts in U.S. intelligence agencies could share some of their knowledge with U.S. industries, without disclosing too much information.<\/strong><\/p>\n Experts at the forefront of coping with highly sophisticated cyber attacks at NSA and elsewhere need to be leveraged in the remedial process. This expertise could also be an element of a \u201ccybersecurity infrastructure bank\u201d \u2014 a bank that would loan government funds to small utilities, water plants and the like to help them quickly upgrade their cyber defenses.<\/p>\n * We must recognize where most of the innovation in cyber actually takes place \u2014 in small, private cybersecurity startups \u2014 and take steps to help the government purchase technology and services from these companies.<\/strong><\/p>\n The government today relies mostly on large, established cyber vendors and integrators, many of which do not sell state-of-the-art wares.\u00a0 The government must restructure procurement policies to attract more innovative blood into the game. Buying yesterday\u2019s solution to defend against tomorrow\u2019s<\/span> challenges and threats is a waste of time and money \u2013 and does not make us more secure.<\/p>\n * The government should cease buying cyber technology and related gear from foreign sources. As Russian and Chinese cyber attacks against the U.S., among others, help illustrate, it is simply too risky.<\/strong><\/p>\n The government already does this to some extent, but it must do more. On the plus side, China-based Huawei Technologies, the world\u2019s largest telecommunications equipment manufacturer, is banned from selling its gear in America, and for good reason. The company is reportedly controlled, in part, by China\u2019s People Liberation Army<\/a>. Now there talk in Congress to ban Russian cybersecurity company Kaspersky Lab from doing business in the U.S.<\/p>\n The concern is logical. Trust is an absolute in vendor selection. Maybe Kasperky hasn\u2019t done anything wrong. But why not switch to a competitor anyway?\u00a0 We know Russia is engaging in nefarious activities, and there is evidence that Russia collaborates with private Russian security firms.<\/p>\n Last week, an incident at a Senate Intelligence Committee hearing said it all. The heads of six intelligence agencies, asked by Sen. Marco Rubio (R-Florida) whether they would be comfortable using Kaspersky software, all flatly said no. These agencies included the CIA, NSA and FBI.<\/p>\n * U.S.\u00a0 Infrastructure, including the electric grid, is much too vulnerable to cyber attack. The systems were designed to be functional, not necessarily secure, and that is clearly unacceptable.<\/strong><\/p>\n A three-pronged strategy can begin fixing things. 1) The government should define a level of expected cyber resiliency and produce a methodology to protect it.\u00a0 2) We should create a clearing center for the implementation of best practices in grid security. 3) We should form an industrial bank to provide long-term financing to utilities that need it in order to help implement this.<\/p>\n We must deal with the reality that many smaller utilities today have neither the financial nor technical resources to become secure<\/a>.<\/p>\n President Trump\u2019s EO sets a 90-day deadline for each agency in the executive branch to submit a risk management report. It would describe their security measures and what are deemed to be significant risks. It also requests a study to determine whether at least some agencies can realistically adopt consolidated network architectures.<\/p>\n Ninety days brings us to late summer. Let\u2019s hope meaningful progress is made by then \u2013 and that the disseminated reports are secured, not a visible roadmap to our vulnerabilities. A major overall fix is still years away. But you have to start somewhere. As Mark Twain once wrote, \u201cThe secret to getting ahead is getting started.<\/p>\n Featured Image: Andrew Harrer\/Getty Images<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"More posts by this contributor:\n<\/div>\n<\/div>\n![\"\"](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2017\/02\/gettyimages-634133704.jpg?w=680\")
A significant piece of cybersecurity news erupted\u00a0last week, although it was nearly drowned out by the growing flap over President Trump’s firing of FBI Director James Comey. There are\u00a0two overriding points\u00a0regarding President Trump’s executive order (EO) outlining plans to improve data security for federal agencies and to better protect critical U.S. infrastructure. No. 1,… Read More<\/a><\/p>\n\n<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>\n<\/div>\n
<\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-340854","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/340854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=340854"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/340854\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=340854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=340854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=340854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}