Sunday, March 28, 2010

The Other Shoe Drops on Cybersecurity Legislation

With all the discussion about #cybersecurity legislation this week, a small but important story has gone largely ignored.  On Thursday, the European Parliament called the development of global standards for cybersecurity regulation ending the current "ad hoc" international efforts http://bit.ly/buNBkC

The idea is to create broader legislation and regulation outside of the European union.  This represents an aggressive approach to controlling the many challenges around this issue including global regulation and cooperation rarely seen or suggested. "Despite the borderless nature of the #Internet, international regulation of #online security does not yet exist, resulting in a multiple abuses from small-scale theft and identity fraud to espionage and mass attacks that shut down a business or utility."

Meanwhile crucial piece of US #cybersecurity legislation is moving closer to becoming law after being approved during a Commerce, Science & Transportation Committee hearing Wednesday. 

The #Cybersecurity Act, S. 773, aimed at protecting critical U.S. network infrastructure against cybersecurity threats by fostering collaboration between the federal government and the private sector (#public/private partnership) firms that maintain that infrastructure, is now on its way to the Senate floor.


The Cybersecurity Act calls for a revision of cybersecurity processes and oversight in government, the facilitation of public-private partnerships on keeping computer systems safe, the funding of cybersecurity research, and the hiring of more cybersecurity specialists.  Companion legislation that would create the national cybersecurity adviser position -- the National Cybersecurity Advisor Act, S.778 -- is still pending before the Senate Committee on Homeland Security and Government Affairs.

This past February saw the passage of House cybersecurity bill called the Cybersecurity Enhancement Act of 2009 (HR 4061), first introduced by Rep. Daniel Lipinski (D-IL) last year. That bill funds research and development for a comprehensive cybersecurity plan that would involve the cooperation of several federal agencies http://nyti.ms/bEQpCk

So where is this conversation going?   Global I think but with the United States and Europe leading.  Perhaps they have the most to fear and/or protect.  After all it appears these governments have biggest target on their backs. This will take a while to wind itself through the legislative processes that be, but the future is clear.  Governments have finally heeded the alarm bells, and they are responding.