======Information assurance and cybersecurity======

How do we keep government data safe and public services running in adversity including deliberate attack from malevolent people, organisations and states?

Today, many govt systems are vulnerable - to both insider and external abuse. Penetration testers refer to examples of taking just 5 minutes from outside a firewall to gain full root permission to govt systems.

Threats are not being assessed properly - for example, they may consider issues such as time to get a system back online, but completely overlook what might happen if all users of a system were phished. Common vulnerabilities are not being routinely assessed and addressed. There is some involvement here of the SI's who are often slow to roll out new security patches and fixes - although their defence is often the sheer number and complexity of systems in place in many departments, meaning that they need to check compatibility first to ensure the latest security fix does not break anything. Such complexity is the enemy of many things it seems, including good IA and security.

Privacy engineering is rarely considered alonside security engineering when developing or commissioning new systems or updates. Look at the NHS system for example, where many NHS people are able to access private medical records. Systems routinely generate reports that are not anomymised.

We need to define what CESG meeds to supply to the rest of government to be effective and to raise the standards of information assurance, security and privacy. There is a balance of trade-offs that needs to be clearly articulated to develop a reliable set of best practice. CESG needs much clearer guidance about what is useful and how to raise the standards in an effective way.

Are CIO's the wrong people? The I in CIO is Information but currently many seem to think it means 'IT'. Normally a CIO would be focused on information assests - which, apart from its people, is all that the civil service has. So if the CIO is not worrying about information assets - who is?

=====Useful Links=====
[[http://fashiontrendsandtips.wordpress.com Fashion Trends Blog]]
[[http://www.outdoorfountains.com/ outdoor fountains]]
[[http://www.etravelpilipinas.com Philippine Travel]]
[[http://www.travelasianplaces.com Travel Asia]]
[[http://www.scratchcardportal.com/ play and win]]
[[http://www.mayweathervsortizlive.net/mayweather-vs-ortiz-live-streaming-watch-online.html mayweather vs ortiz]]
[[http://www.homeinnovationideas.com home ideas]]
[[http://www.mayweathervsortizlive.net/mayweather-vs-ortiz-live-streaming-watch-online.html mayweather vs ortiz live streaming]]
[[http://www.pacquiaovsmarqueziii.info pacquiao vs marquez]]
[[http://www.worldcup-fifa.net Fifa World Cup]]
[[http://www.pacquiaovsmarqueziii.info/pacquiao-vs-marquez-tickets-on-november-2011.html pacquiao vs marquez tickets]]
[[http://www.donairevsnarvaez.info donaire vs narvaez]]
[[http://www.cottovsmargarito.info cotto vs margarito]]
[[http://www.donairevsnarvaez.info/donaire-vs-narvaez-tickets.html donaire vs narvaez tickets]]
[[http://www.cottovsmargarito.info cotto vs margarito live streaming]]
[[http://www.cottovsmargarito.info/cotto-vs-margarito-tickets.html cotto vs margarito tickets]]
[[http://www.ticketingoutlet.com/sports/ufc-137-st-pierre-vs-diaz.html st-pierre vs diaz]]
[[http://www.ticketingoutlet.com/sports/ufc-137-st-pierre-vs-diaz.html st-pierre vs diaz tickets]]
[[http://furniturehomeimprovement123.blogspot.com Furniture Home Improvement]]
[[http://www.essaywritingguide.info essay writing guide]]
[[http://www.mayweathervsortizlive.net pacquiao vs marquez]]
[[http://www.ticketingoutlet.com/sports/ufc-velasquez-vs-dos-santos.html velasquez vs dos santos]]
[[http://www.ticketingoutlet.com/sports/ufc-velasquez-vs-dos-santos.html velasquez vs dos santos tickets]]

=====Next Steps=====
- 90 day review of [information assurance and cybersecurity strategies]

Back to [[http://wiki.idealgovernment.com/IdealGovernmentITStrategy CTPR Ideal Government IT Strategy home page]]









































[[http://www.research-service.com/custom-research-paper.html research papers]]""
[[http://www.houstonnewhomeconstruction.com/ Houston New Homes for Sale]]
[[http://www.thingstodoinbali.org/ Bali attractions]]
[[http://www.whattodoinsydney.net/ What to do in Sydney]]
[[http://pacquiaovsmarquez3live.com/2011/07/pacquiao-vs-marquez-tickets-for-sale/ Pacquiao vs Marquez Tickets]]
[[http://www.andrewflusche.com/ Spotsylvania DUI Lawyer]]
[[http://www.houstonnewhomeconstruction.com/ Houston new home]]
[[http://mayweatherversusortiz.com/2011/07/mayweather-vs-ortiz-tickets-for-sale/ Mayweather vs Ortiz Tickets]]
[[http://www.andrewflusche.com/ Stafford DUI Lawyer]]
[[http://www.houstonnewhomeconstruction.com/ Houston new homes]]
[[http://mayweatherversusortiz.com/2011/07/mayweather-vs-ortiz-free-live-streaming/ Mayweather vs Ortiz Live Streaming]]
[[http://www.andrewflusche.com/ Fredericksburg DUI Lawyer]]
[[http://www.houstonnewhomeconstruction.com/ New Homes in Houston]]
[[http://mayweatherversusortiz.com/ Mayweather vs Ortiz]]
[[http://pacquiaovsmarquez3live.com/ Pacquiao vs Marquez]]
[[http://www.andrewflusche.com/ Virginia Reckless Driving]]
[[http://www.houstonnewhomeconstruction.com/ Houston New Home Builders]]
[[http://www.andrewflusche.com/ Spotsylvania Reckless Driving]]
[[http://www.houstonnewhomeconstruction.com/ Houston New Home Communities]]
[[http://www.whattodoinsydney.net/ Things to do in Sydney]]