1. Week 2, Introduction to Security

• Consider 2008 federal computer security report card.

• Report for 2008 indicates that several critical to national security departments continue failing to implement the Federal Information Security Management Act, FISMA^(*).

• From a cyber espionage perspective, the lack of prioritization of departments that must be audited first, often results in anecdotal cases...

  • ...But who cares if the Environmental Protection Agency scored A+ when the Nuclear Regulatory Commission and the Department of the Interior have been failing for 2006 and 2007 altogether? Does Housing and Urban Development scores higher than the Department of Defense?

• _________________

  • ^(*) see FISMA 2002 ACT Wikipedia article.