Bob Turner on Technology

Homeland Security authority over cyber-security.

Congressional Summary:The Promoting and Enhancing Cybersecurity and Information Sharing Effectiveness Act (or PRECISE Act): NATIONAL CYBERSECURITY AUTHORITY: To protect Federal systems and critical infrastructure information systems and to prepare the Nation to respond to acts of cyberterrorism, the Secretary of Homeland Security shall--

• conduct risk assessments for Federal systems that may include threat, vulnerability, & penetration testing;
• facilitate information sharing among and between Federal agencies, State and local governments, the private sector, academia, and international partners.

Committee Discussion (Josh Smith in National Journal, & BankInfoSecurity.com, Feb. 1, 2012):Sponsor Dan Lundgren says the bill addresses cyber-risks "in the least disruptive manner." Some proposals in the Senate, for example, would give the DHS authority to regulate, rather than simply designate critical infrastructure. Lungren adds, "Preserving the status quo of voluntary action, are no longer acceptable."

The legislation would establish the National Information Sharing Organization, or NISO, that would facilitate the exchange of vital cyber-threat information. Karen Evans, Pres. Bush's CIO, questions the need for NISO: "Creating another organization seems like it will slow down process not necessarily enhance it."

Opponent's Comments (bungalowbillscw.blogspot.com, Feb. 2, 2012):[NISO is a] "public-private organization". America has plenty of them, like Fannie Mae and Freddie Mac. Why would the government need to get involved with corporations' cyber-protection? Sharing info is well and good, but this new cyber-security organization will begin to take control of cyber-security, after appropriating billions for research. What will this research comprise of? Bringing in experts and companies; then carbon-copying their tactics and making them mandatory; instead of letting the market pick the best tactics.