White House declassifies parts of US cybersecurity plan
| San Francisco
On Tuesday, the White House declassified cybersecurity somewhat when cybersecurity czar Howard Schmidt pulled back the curtain, at least a bit, on the Bush administration鈥檚 secretive plan to defend the nation鈥檚 computer networks.
At the RSA Conference, a security industry event, in San Francisco Tuesday, Mr. Schmidt announced that the Obama administration was partially declassifying the 2008 Comprehensive National Cybersecurity Initiative (CNCI) in the name of transparency.
鈥淭ransparency is particularly vital in areas, such as the CNCI, where there have been legitimate questions about sensitive topics like the role of the intelligence community in cybersecurity,鈥� said Schmidt in a statement posted on the .
The declassified portion of the includes descriptions of 12 broad initiatives of the CNCI, but few details.
According to the Wired blog, 鈥渢he most most controversial part of the declassified plan is a discussion of a need for the government to define its role in protecting private critical infrastructure networks鈥� such as telecoms, the electric grid, Internet providers, and banking networks.
鈥淭丑别 Department of Homeland Security and its private-sector partners have developed a plan of shared action鈥� in an effort to confront the threats facing nongovernment computer networks, according to the declassified plan.
The document largely focuses on efforts to secure the federal government鈥檚 vast computer networks with the use of its Einstein system to detect unauthorized attempts to access government computers.
鈥淭丑别re's not much in the way of details,鈥� wrote , 鈥渂ut those that are included are likely to raise questions about the role of the National Security Agency in network surveillance,鈥� which worries many civil libertarians.
President Obama, who has made cybersecurity a priority, has said that his administration鈥檚 cybersecurity plans will not include 鈥渕onitoring of private sector networks or Internet traffic.鈥�
The Electronic Privacy Information Center (EPIC), which filed suit against the government for the full text of the CNCI, said it was pleased the description was released, but still wants to see the full document. Marc Rotenberg, EPIC executive director, told the Associated Press that he would like to see the 鈥減rivacy safeguards鈥� the government has in place when assessing cyber threats.
Schmidt (who the Monitor wrote about here) said he hopes the release of the document will answer some of those privacy concerns and lead to stronger partnerships with the private sector in fighting the growing threat of cyber attacks. "Transparency improves our collective knowledge," he said, "and helps bind our partnerships together to form the most powerful cyber tools that we have."
