Cyber Security Policies and Defense Contractors Essay

This would allow the government to foot the cost of research and development and slightly standardize the industry. An option should be established to allow the private sector to add input and aid in creating concepts that would aid in cyber security measures within their industry. One issue of concern would be how slow the government can be sometimes to create or implement features such as cyber security measures or equipment. Cyber security laws have not yet caught up to the technology which available to most of the public. Including the private sector to have an option to assist in creating cyber security programs and measures may be beneficial with expediting the process of implementing security

H.R. 1731, the National Cybersecurity Protection Advancement (NCPA) Act, is bipartisan bill passed unanimously by the Committee on Homeland Security. This pro-privacy, pro-security bill ensures the sharing of cyber threats is transparent and timely. It strengthens the NCCIC’s role as the lead civilian interface for cyber threat information sharing by: Providing liability protections for the voluntary sharing of cyber threat indicators and defensive measures with the NCCIC or private-to-private. Granting liability protections for private companies to conduct network awareness of their own information systems. Allowing companies to operate defensive measures and conduct network awareness on information systems they own or operate. The NCPA Act also ensures personal information

Since the onset of the first packet switching event that many believe to be beginning of the internet, no other technology besides the printing press has ever transformed the ability to deliver information. Although the internet is used by a large percentage of the civilized world, few Americans realize how vital cyberspace is to our national infrastructure. Today, we are faced with even more threats although it has been a recognized problem since 2009, when President Barrack Obama said “The cyber threat is one of the most serious economic and national security challenges we face as a nation. It’s also clear that we’re not as prepared as we should be, as a government or as a country (Obama, 2009).” Every industry that operates in the United States is dependent on the internet for some aspect of their business. Commerce, transportation, financial institutions, military, as well as industrial control systems are all interconnected. This interconnectedness has created vulnerabilities within their infrastructure that have increasingly become targets of terrorists, script kiddies, foreign governments and hackers of all types.

The issue of strong cybersecurity efforts in the United States has been especially topical in 2017, and on the rise over the last few years. The Equifax breach and the breaching of the Democratic Party during the 2016 Presidential Election are recent examples that are bringing up the conversation of cybersecurity and make citizens curious of whether or not the United States government has plans in place to deter these events from happening. People are already worried about the damages these attacks can cause with consequences such as stolen information or monetary loss of close to five billion dollars in 2017 alone (cybersecurityventures.com). Although there are already solid plans in place to raise cybersecurity efforts in the United

Another thing the government should be focusing on is to stop buying on cyber technology from other countries and start relying on cyber technology done in the U.S. By relying on technology from other countries, it makes us a target therefore, placing us at more risk. Why? Because they might know or have an idea in which areas we are lacking based on the technology that we buy from them. As far as we know, they might have a hidden agenda on how and when to attack. Don’t get me wrong the government already follows this policy to some extent but they should try use it more. As I said before, these are all great goals for the next few years but what has been done since this new EO was established?

Cyber security, also referred to as information technology security, focuses on protecting computers, networks, software programs and data from unintended or unauthorized access, change or destruction. Post 9/11 and other terrorist attacks, the United States grows its endeavors to repulse cyberattacks, U.S. corporate organizations and the government agencies wind up in strife over how to adjust to new methods of security and privacy. The current state of security measure protocols and privacy policies placed by the US government in cyberspace raises concerns for the 99%. This is due to the recent cyber-attacks on American corporate organization systems and government alike, where their digital information and network infrastructures within the systems were compromised, and personal data was hacked and stolen.

On February 12, 2015 president Obama signed an executive order with the intention to expand the Cybersecurity of the U.S. and to promote principles of collaboration not just in America but around the globe. Cybersecurity has been identified as one of the most challenging subjects of the 21st-century; moreover, cyber-attacks can further compromise the future of our economic development as much as our national security and the decrement of our civil rights and privacy. Since Obama initiate his administration, he has been working on establishing the framework to better balance the interaction between, government agencies, private sector, and the general public. The objective in this essay is to better understand the connotations from several

Title III of the E-Government Act, entitled the Federal Information Security Management Act (FISMA) requires each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other sources (Staff, 2016). FISMA was amended by The Federal Information Security Modernization Act of 2014. The amendment was established to modernize the Federal security practices to focus on security concerns. The results of these changes will strengthen continuous monitoring, continue focusing on agency compliance, and report on issues caused by security incidents. FISMA, Paperwork Reduction Act of 1995 and the Information Technology Management Reform Act of 1996 (Clinger-Cohen Act), clearly highlights the plans for a cost-effective security program. In support of and reinforcing this legislation, the Office of Management and Budget (OMB) through Circular A-130, “Managing Federal Information as a Strategic Resource,”1 requires executive agencies within the federal government to:

In 1997 the National Security Agency (NSA) tested the Pentagon’s cyber security in an exercise named “Eligible Receiver”. Within two days of the exercise, the NSA team had penetrated the classified command network and was in complete control of network. Two years later, the United States Air Force experienced a computer breach in which huge amounts of data were being exfiltrated from research files located on airbases. “Gigantic amounts of data were being shipped out from a lot of computers in the Defense Network and from many data systems in the national nuclear laboratories of the Energy Department.” (Clarke, p. 111) File case named “Moonlight Maze”, by the FBI day-lighted two important aspects of information security. Computer specialist

The government needs to take greater steps to protect and secure government information from foreign cyber-attacks.

People across the world are becoming disproportionately dependent on modern day technology, which results in more vulnerability to cyber-attacks including cybersecurity breaches. Today, the world continues to experience inordinate cases of cybersecurity meltdowns. There is a rapid growth in complexity and volume of cyber-attacks, and this undermines the success of security measures put in place to make the cyberspace secure for users. Cyber-attacks on both private and public information systems are a major issue for information security as well as the legal system. While most states require government organizations and certain federal vendors to report incidences of data breaches, no equivalent legislation exists to cover private entities.

The Federal Government needs to create information systems which are more effective shielded systems to protect their assets and resources at home. The foundation of any mandated cybersecurity strategies that secure our nation national security must incorporate worldwide or state local threats whether targeted toward the federal government or the private sector forces. The OPM breach highlighted the insufficient and inconsistence security approaches the federal government has already used in modernizing the existing cybersecurity policies. There is a requirement for the United States government to institute polices that would incorporate and implement new government cybersecurity structures and centralized the protection of their assets to avert future breaches (Source). Examining the inadequacies in the current national cybersecurity policies and regulations is disappointing as OPM choice to implement these mechanisms and the current authoritative propositions to cybersecurity must change immediately. It was reported that OPM only spent $2 million in 2015 to avert pernicious digital assaults, while the Department of Agriculture spent $39 million. The Department of Commerce, Department of Education, and Department of Labor likewise invested more money in cybersecurity resources than the Office of Personnel Management. The Small Business Administration devoted a similar amount into cybersecurity to recognizing, examining, and alleviate any cyber breaches as OPM, however

In the previous five years, cybersecurity has turned into the most looked for after calling around the world. More than 90 percent of respondents to an overview directed by the Ponemon Institute (2011) detailed being a casualty to cyberattacks amid the most recent year, costing all things considered more than $2 million for each association. This number keeps on ascending as the two programmers and security devices progress. As indicated by PwC, roughly 33% of all U.S. organizations are as of now utilizing digital protection (Lindros and Tittel, 2016).

Every state in the nation should have a comprehensive IT security policy due to the “growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems” ("Cyberspace policy RevIew", 2016). Because of “ the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights” ("Cyberspace policy RevIew", 2016). It is the responsibility of state and the federal government “ to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” ("Cyberspace policy RevIew", 2016).

As innovation turns out to be increasingly incorporated into our communities, government and businesses, the need to secure data frameworks and information immeasurably increase. In the current years, digital assaults have been fruitful in taking personal data and photographs from Apple’s consumer devices and personal identifiable information (PII) of government and state representatives from OPM. These assaults, which were broadly announced by the media, are only two of numerous that have happened since the implementation of innovation in business, organizational and governmental applications (Greenough, 2016). As digital assaults and dangers develop, so does the digital security marketplace. Digital