CyberCrime: Cybersecurity for Cyberspace Essay

The two professionals will be responsible for driving the attainment of a secure and free Internet that is grounded on the rule of law, privacy, and free speech. In addition, the move will ensure that Australia attains a cyber capacity approach that is well coordinated in the region to continue with the elimination of the Internet state censorship (Klimburg, A., 2011). In like manner, this undertaking would promote the people’s stance that the Internet should be used to offer an equal opportunity for every citizen. Generally speaking, the political trends discussed above, it is evident that the Australian government is making substantial efforts toward ensuring the cyber security is enforced to a significant degree.

For this research paper, proposals from May 2011 Cybersecurity Legislative Proposal and the proposed Cyber Security Act of 2012 is considered which would impose specific requirements on State of Maryland information security policy. They are as follows:

H.R. 1731, the National Cybersecurity Protection Advancement (NCPA) Act, is bipartisan bill passed unanimously by the Committee on Homeland Security. This pro-privacy, pro-security bill ensures the sharing of cyber threats is transparent and timely. It strengthens the NCCIC’s role as the lead civilian interface for cyber threat information sharing by: Providing liability protections for the voluntary sharing of cyber threat indicators and defensive measures with the NCCIC or private-to-private. Granting liability protections for private companies to conduct network awareness of their own information systems. Allowing companies to operate defensive measures and conduct network awareness on information systems they own or operate. The NCPA Act also ensures personal information

Introduction: - for my research project, I would like to explore about the cyber security measures. Cybersecurity covers the fundamental concepts underlying the construction of secure systems from the hardware to the software to the human computer interface, with the use of cryptography to secure interactions. These concepts are easily augmented with hands-on exercises involving relevant tools and techniques. We have different types of computer related crimes, cybercrimes, computer related offenses, federal approaches defenses. The information resources management has the technical matters for which IT are widely known. Cyber resources and cyber power as well as cyber security. We have spent a lot of time talking about many different high level critical infrastructure protection concepts we have general rule stayed away from cyber security explaining the ins and out of how the NIPP and NRF work together to ensure that we can live our daily live in relative comfort.

Among one of the missions of The U.S. Department of Homeland Security is to protect and preserve the security of the Cyberspace in the country. The principal objective of this Security Plan is to give instructions and direction for the Department’s workers and help the Homeland Security to create best practices and strategies in the IT security system.

As technology advances across the globe, the potential for new types of threats arise. The DHS realized that since 1997, cyber-based attacks on federal systems have continued to increase at an alarming rate. This threatens our countries national security because cyber-based attacks are ever expanding and have continued to be one-step ahead of the DHS, until 2003.

The Information Technology Sector is the most important CNI element Businesses, governments, academia, and private citizens are increasingly dependent upon Information Technology Sector functions. These virtual and distributed functions produce and provide hardware, software, and information technology systems and services, and - in collaboration with the Communications Sector. The importance of technology within our generation has increased and cyber-attacks have been in

Predicting attacks is important, but swift response is key. DHS realized that the only way to have effective incident responses is to have plenty of practice and close cooperation across government and with the private sector. To prepare for and ensure effective cooperation during a significant event, DHS instituted a cyber-attack exercise program to periodically test processes and procedures for responding to a significant cyber incident impacting the financial sector. These exercises will help clarify roles and responsibilities, identify gaps in response plans and capabilities, and assist with developing plans to address those

Cyber threats and attacks are becoming more common, sophisticated and damaging. NATO and its Allies rely on strong and resilient cyber defenses to fulfil the Alliance’s core tasks of collective defense, crisis management and cooperative security. NATO affirms international law applies in cyberspace

The ITF tries to make the public and private sector work together more effectively. It also ensures that the policies are adopted widely among security enterprises. It is understood that protecting critical infrastructures is in the interest of both the government and the private sectors. In reality, private sectors usually have different business priorities that need to be addressed before security. Even though there are independent market-base incentives already in place that organizations can take advantage of, cyber risks outgrow the pace of security improvements. To address the problems and to coordinate with the private sectors and provide incentives for them, the Incentives Working Group was created to study different incentive options and their cost benefit to encourage best security practice implementation across organizations (“Analytic Report: Executive Order 13636 Cybersecurity Incentives Study” 4). To encourage organizations to create and provide security products and services for the Framework, the government provides grants for R&D and allows these organizations to recover their investments with special rates. For the Framework adopters, they are provided with financial and tax incentives to offset the cost of adoption (6). Furthermore, the government introduces regulations that place capped security liabilities for adopters and

The NIST, in cooperation with the Department of Homeland Security (DHS), establish performance goals that should be met to enhance cybersecurity (The White House, 2013). Because compliance is voluntary, the standards set by the NIST came from industry best practices to appease private operators and ensure that the cybersecurity of the nation’s critical infrastructure was improved through compliance. SCADA Systems are pervasive throughout our nation’s critical infrastructures which govern many aspects of the population’s daily life. Travel, the movement of goods, essential utilities and basic life sustainment necessities are all dependent on properly functioning SCADA Systems. Executive order 13636 ensures that SCADA systems are integrated with and function in conjunction with other devices that report real-time health of operations. Should these systems be compromised, national security would be placed at risk. An example of vulnerable infrastructure are Very Small Aperture Terminals (VSATs) which are used for remote transmission of credit card transactions, and the transfer of data from SCADA systems to government classified systems (Storm, 2015). If these VSATs are compromised, they provide

The author sheds light on several different instances where the government has failed to put the proper tools in place to secure sensitive and classified data within its IT sector. They highlight the unfortunate security incident that took place at the VA and the steps taken thereafter to try and fix the problems within cyber security. They also discuss the importance of utilizing FISMA and NIST guidelines in an effort to try and fix the issues within a lot of the lower rated government agencies. The author also discusses how the low ratings are actually a vast improvement from the previous scores received by the government in the past and what was done to obtain the higher marks. This article is relevant to my risk assessment because it highlights where the government currently is in terms of cyber security and how cloud computing can possibly bring them even further down if not used properly.

Strategic goal I: Build and maintain ready forces and capabilities to conduct cyberspace operations. (INSA 2011,17)

The purpose for an IT security policy is to provide “strategy, policy, and standards regarding the security of and operations in cyberspace, and encompasses the full range of threat reduction, vulnerability reduction, deterrence, international engagement, incident response, resiliency, and recovery policies and activities, including computer network operations, information assurance, law enforcement, diplomacy, military, and intelligence missions as they relate to the security and stability of the global information and communications infrastructure” ("Cyberspace policy RevIew", 2016).

Cyber-crime has become the most threatening crime in so many ways, because it can be linked in one way or another to other crimes. And worst of all, society isn’t even in a position to defend itself against it yet. An article published in the Wall Street Journal quoted the Pentagon stating “If a cyber-attack produces the death, damage, destruction or high-level disruption that a traditional military attack would cause, then it would be a candidate for a "use of force" consideration, which could merit retaliation.”(Pentagon: Cyber Attacks Can Count As Act Of War, 2011) There have been recent attacks on the Pentagons computer systems, which has created urgency for a better approach to keep the hackers out. There have been reports stating that the United States Government plans to spend $13.3 billion by 2015 to defend against cyber-crime. In the fall of 2010 the International Cyber Security Protection Alliance (ICSPA) was formed. They are a global not-for-profit organization “established to channel funding, expertise and assistance directly to assist law enforcement cyber-crime units in both domestic and international markets.” (Coleman, 2011)