Agencies give themselves passing grades on digital

From: FCW

By Adam Mazmanian

The Digital Government Strategy helped persuade agencies to make progress on mobile security, device procurement, and mobile apps over the last year, but there’s a lot of work left to be done, according to a survey of federal information technology executives by the Mobile Work Exchange.

Few federal IT executives give the government top marks for executing on the goals of the digital strategy, with just nine percent saying their agency was doing A-grade work. The bulk of respondents put their agency in the middle, with 39 percent awarding themselves a C grade, and 36 percent a B.

NIST Analysis of Public Comments On Its Cybersecurity Framework: One Step Forward For Transparency, One Step Backwards For Voluntary Standards

 Much to its credit NIST has:

 – made public in a very accessible forum (not regulations.gov) all the comments it received from the public in response to its Request for Information.

 – conducted an in-depth review of the comments it received and presented them in an easily understandable format.

NIST raised a question which CRE has been exploring with a number of international organizations, namely:

What role(s) do or should national/international standards and organizations that develop national/international standards play in critical infrastructure cybersecurity conformity assessment?

The aforementioned actions are a step forward.

Keyboard wars: US turns to rookies as cyber threats worsen

From: The Age

Demand for internet security experts is dramatically overwhelming supply, write Sandrine Rastello and Jeanna Smialek.

Five dozen teenagers are hunched over computers in a hotel conference room near Washington. While other kids their age are playing baseball, these competitors are decrypting codes, cleaning malware and fending off network intrusions, to score points in the finals of a national cyber security contest, called CyberPatriot.

Just hours later, these very same high-school students get a glimpse of the appetite for their skills, from potential sponsors such as network equipment maker Cisco Systems. Internships start as young as 16 at companies such as Northrop Grumman, which reserves 20 spots for participants in the contest.

Nation’s critical infrastructure cyber defenses weak, DHS tells hearing

From: PC Advisor

By John P. Mello

The nation’s critical infrastructure is vulnerable to cyber attacks and better  information sharing is needed to strengthen defenses.

That’s the message Charles Edwards, deputy inspector general for the U.S.  Department of Homeland Security, told a Congressional committee at a public hearing on Thursday.

Since 1990, Industrial Control Systems (ICS), which are used to manage  components of the country’s critical infrastructure, have been connecting to the  Internet to improve their operations, Edwards explained in written testimony submitted to the House  Subcommittee on Cybersecurity, Infrastructure Protection and Security  Technologies.

Presidential Memorandum — Modernizing Federal Infrastructure Review and Permitting Regulations, Policies, and Procedures

Editor’s Note: Executive Order 13604 is available here.

From: The White House

May 17, 2013

MEMORANDUM FOR THE HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES

SUBJECT: Modernizing Federal Infrastructure Review and Permitting Regulations, Policies, and Procedures

Reliable, safe, and resilient infrastructure is the backbone of an economy built to last. Investing in our Nation’s infrastructure serves as an engine for job creation and economic growth, while bringing immediate and long-term economic benefits to communities across the country. The quality of our infrastructure is critical to maintaining our Nation’s competitive edge in a global economy and to securing our path to energy independence. In taking steps to improve our infrastructure, we must remember that the protection and continued enjoyment of our Nation’s environmental, historical, and cultural resources remain an equally important driver of economic opportunity, resiliency, and quality of life.