U.S. info-sharing program draws fire

[DuctapeFatwa]

A long-anticipated program meant to encourage companies to provide the federal government with confidential information about vulnerabilities in critical systems took effect Friday, but critics worry that it may do more harm than good.

The so-called Protected Critical Infrastructure Information (PCII) program allows corporations who run key elements of U.S. infrastructure -- energy firms, telecommunications carriers, financial institutions, etc. -- to submit details about their physical and cyber vulnerabilities to a newly-formed office within the Department of Homeland Security, with legally-binding assurances that the information will not be used against them or released to the public.

The program implements controversial legislation that bounced around Capitol Hill for years before Congress passed it in the wake of the September 11 attacks as part of the Homeland Security Act of 2002. Security agencies have long sought information about vulnerabilities and likely attack points in critical infrastructures, but have found the private sector reluctant to share, for fear that sensitive or embarrassing information would be released through the Freedom of Information Act (FOIA).

But some public interest advocates worry about the law. One of their arguments is that the PCII program takes the exact opposite approach of what it should: depriving the government of any means to compel companies to fix vulnerabilities, either by fiat, or by bringing public pressure to bear. "Basically, the information goes into government, and that's the dead end," says Sean Moulton, a senior policy analyst at OMB Watch. "Aside from encouraging the companies to do something, as far as my reading of the statute, they don't have much authority at all, and they can't warn the public." ...the new regulations might even provide companies with legal cover for their own negligence -- resulting in less security, not more.

http://www.securityfocus.com/news/8090

[hedgetrimmer]

1. you are doing a service.

thank you.

many blessings.

[DuctapeFatwa]

2. WOW, Thanks! What a sweet thing to say!

Blessings to you, too :toast: