About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Security Adviser
P.J. Connolly

Measure twice

I HAVE MIXED feelings concerning the plan for a Cabinet-level Department of Homeland Security. Like the little girl of the nursery rhyme, when it's good, it's very, very good, and when it's bad, it's horrid.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
Research Reports  (CIO)
Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
My first criticism of the plan is that it appears to have been put together in a hurry by someone who skimmed the Federal Register for anything that might fit. This isn't just me; as I write this column, my local paper is noting the presence of billion-dollar typos. But bringing together a hundred different agencies, bureaus, and other offices is a recipe for infighting, if not gridlock.

The grab-bag nature of the new department also leads me to believe that the architects of the plan haven't thought things through. It sounds great to tell Americans that the department will include the Coast Guard and the Secret Service, to name two of the most prominent divisions planned for transfer. But I wonder what the Department of Homeland Security is going to do with lighthouses, maritime rescue, and schoolchildren augmenting allowances by using color copiers to counterfeit currency.

I'm also concerned because indications are that the new department will rely on the CIA, the FBI, and the National Security Agency for intelligence. Sept. 11 should have reminded everyone in the security community about our dependence on timely analysis. The current squabble over who failed to "connect the dots" mostly misses the point. The problem is that our government collects more data than it can handle, and the plan for a Department of Homeland Security does nothing to fix this situation.

But parts of the proposal are long overdue. For example, pulling together the various bodies that oversee critical pieces of national infrastructure -- including communications and the Internet -- could be beneficial, assuming that the five or six bodies become one, or two at the most. Faithful readers -- and I know you're out there -- will remember that last year I called for removing the National Infrastructure Protection Center (NIPC) from the FBI's control (see "Federal insecurities").

Add to this the various cyberdefense components of the General Services Administration, the Commerce Department, and the rest of the civilian government, and we might finally have an effective response to the threat of cyberterrorism.

But ultimately, the government's role in cybersecurity pales beside that of private industry and individual end-users. That's not just me talking, that's from NIPC honcho Richard Clarke. I only wish that the much-vaunted effectiveness and efficiency of private enterprise could be more closely applied to securing information resources instead of restating quarterly results.

The current plan for reorganizing the government's homeland security effort addresses only a small part of the much bigger problem. I'd feel a lot safer if the changes were made in a sensible fashion instead of moving some boxes around on an organization chart and calling it " security."


P.J. Connolly (pj_connolly@infoworld.com) covers collaboration and security for the InfoWorld Test Center and knows the perils of information overload.




RELATED SUBJECTS

Security

MORE >


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» IT Compliance Conference: Nov. 5-7 in San Diego
Best Practices, Peer Experiences, & Expert Advice for Building a Defensible IT Compliance Program
» FREE Sophos Threat Detection Test
Is your AV catching everything it should? Free virus, spyware and adware scan.
» IT Audit Checklists
Prepare for your next internal IT audit. Checklists cover security, risk management, PCI, and more.
» FREE White Paper: Mitigating Rock Phish Attacks
Standard anti-phishing methods cannot defeat complex Rock Phish attacks. Learn how to fight back...
» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2009, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no