Create an independent agency that reviews cybersecurity processes and produces timely reports.
Specifically, Obama will pursue reforms of how the Patriot Act authorizes the NSA to conduct surveillance, add a public privacy advocate to the secret NSA courts, build a website laying out what the NSA collects and what it doesn't, and create an independent cybersecurity processes review agency.
Specifically, in this interview, we examine unique approaches to handling cybersecurity and the process for handling a breach once it is discovered.
Establishing standard processes for cybersecurity and general harmony in computing resources is something the OMB has been working on for a long time.
Being a trusted global cybersecurity firm and operating core processes out of Russia where authorities might be able to lean on your company for access has essentially become untenable as geopolitical concern over the Kremlin's online activities has spiked in recent years.
The testbed enables a research process in which cybersecurity vulnerabilities are discovered, exploits are used to understand the implications of the vulnerability on controlled physical processes, identified problems are classified by criticality and similarities in type and effect, and finally cybersecurity mitigations are developed and validated against within the testbed.
He mentioned companies such as Symantec, Intel and PG&E as stepping up and using the government's new Cybersecurity Framework, but likened the process of technological development to building a cathedral.
Furthermore, "the entire process of incorporating cybersecurity considerations should be fully documented".
"We want to assure the I.T. cybersecurity community that the transparent, public process used to rigorously vet our standards is still in place," The National Institute of Standards and Technology said in a public statement.
According to cybersecurity industry insiders monitoring the appointment process, at least three people were informally offered the cyber czar post and turned it down, including former Virginia Sen. Tom Davis, Microsoft security executive Scott Charney and Good Harbor Consulting Executive Paul Kurtz.
"If upheld, this decision could force US technology companies to actually build hacking tools for government against their will, while weakening cybersecurity for millions of Americans in the process," Wyden said.
