Regulatory Cyber Security: The FISMA Focus IPD

 Much to its credit NIST has:

 – made public in a very accessible forum (not regulations.gov) all the comments it received from the public in response to its Request for Information.

 – conducted an in-depth review of the comments it received and presented them in an easily understandable format.

NIST raised a question which CRE has been exploring with a number of international organizations, namely:

The aforementioned actions are a step forward.

From: The Age

Demand for internet security experts is dramatically overwhelming supply, write Sandrine Rastello and Jeanna Smialek.

From: PC Advisor

By John P. Mello

The nation’s critical infrastructure is vulnerable to cyber attacks and better  information sharing is needed to strengthen defenses.

That’s the message Charles Edwards, deputy inspector general for the U.S.  Department of Homeland Security, told a Congressional committee at a public hearing on Thursday.

Since 1990, Industrial Control Systems (ICS), which are used to manage  components of the country’s critical infrastructure, have been connecting to the  Internet to improve their operations, Edwards explained in written testimony submitted to the House  Subcommittee on Cybersecurity, Infrastructure Protection and Security  Technologies.

Editor’s Note: Executive Order 13604 is available here.

From: The White House

May 17, 2013

MEMORANDUM FOR THE HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES

SUBJECT: Modernizing Federal Infrastructure Review and Permitting Regulations, Policies, and Procedures

Reliable, safe, and resilient infrastructure is the backbone of an economy built to last. Investing in our Nation’s infrastructure serves as an engine for job creation and economic growth, while bringing immediate and long-term economic benefits to communities across the country. The quality of our infrastructure is critical to maintaining our Nation’s competitive edge in a global economy and to securing our path to energy independence. In taking steps to improve our infrastructure, we must remember that the protection and continued enjoyment of our Nation’s environmental, historical, and cultural resources remain an equally important driver of economic opportunity, resiliency, and quality of life.

From: Fuel Fix

by Zain Shauk

A group of regulatory and intelligence experts that includes a former director of the Central Intelligence Agency said Thursday they have launched a new effort to focus on computer security solutions facing energy companies and the government.

The goal of the group, which includes former CIA and National Security Agency director Michael Hayden, will be to make proposals that can fill in holes and clarify gray areas in regulations and standards to help the electric grid protect against online threats.