Critical Foundations: Protecting America’s Infrastructure :
Seminal report from the 1997 President’s Commission on Critical
Infrastructure Protection (PCCIP).
The National Strategy to Secure Cyberspace : The guiding
document for the US government’s cybersecurity efforts. Outlines
the threat and the government’s initiatives focusing on a public
private partnership and information sharing.
Summary of Computer Security Laws, Executive Orders and Directives
: A strong overview of the major cybersecurity players and
initiatives within the federal government.
within the Department of Homeland Security :
US-CERT : The US Computer Emergency Response Team servers as
the public face of the government’s cybersecurity efforts based
within the Dept. of Homeland Security (DHS).
National Cyber Security Division Announcement
: The press
release describing the creation of the National Cyber Security
Division (NCSD) with DHS to combat cyber-threats.
Lieberman Criticizes DHS Cybersecurity Efforts
: An open letter
from Senator Joseph Lieberman to DHS head Tom Ridge expressing
concerns over the preparedness of US cybersecurity defenses. This
detailed document outlines both the argument for immediate action on
the cybersecurity front and areas identified as needing improvement.
US Cybersecurity Chief Resigns : Article covering the
resignation of Amit Yoran as the head of DHS cybersecurity efforts,
citing frustrations concerning the importance of cybersecurity
Progress and Challenges in Securing the Nation’s Cyberspace : A
July of 2004 report by the Office of the Inspector General analyzing
the progress DHS has made toward improving national cybersecurity.
Overview of DHS Cybersecurity R&D Activities : Presentation by
Dr. Simon Szykman describing what research topics the DHS considers
vital to mitigating cybersecurity threats.
DHS moves ahead with cybersecurity R&D efforts : Article
outlining major DHS R&D initiatives within cybersecurity.
Legislation & Other Congressional Action :
Important Computer Security Legislation : A concise list of
legislation impacting the world of cybersecurity.
Cybersecurity Research & Development Act : A 2001 congressional
bill providing funding for research and education in the area of
Health Insurance Portability and Accountability Act (HIPAA) :
Security Standards for Medical Data : Description of the
significant cybersecurity requirements on hospitals, HMO’s and
others with access to private medical data created by HIPAA
Federal Information Security Management Act (FISMA) : Text of
the bill that outlines annual cybersecurity reporting requirements
for federal agencies.
NIST: FISMA Recommended Security Controls : Specific suggested
implementation requirements for federal agencies in order to ensure
Draft of Corporate Information Security Accountability Act :
Draft legislation from congressional cybersecurity advocate Rep.
Adam Putman (R-FL). The bill never reach a vote.
Recommendations from the Corporate Information Security Working
Group (CISWG) : Legislative recommendations from the CISWG, a
diverse industry and government body created by Putman.