Big bucks for cyber security

Foreign Policy magazine commented in their blog today on Walter Pincus' story in Washington Post regarding cyber security funding. CSIS's James Lewis notes the perennial issue surrounding cyber security...who exactly is in charge.



================
by: Alex Ely
Mon, 07/21/2008 - 4:31pm

Walter Pincus reports today on a surprisingly large allocation of U.S. federal funds for cyber security:

"A highly classified, multiyear, multibillion-dollar project, CNCI -- or "Cyber
Initiative" -- is designed to develop a plan to secure government computer
systems against foreign and domestic intruders and prepare for future threats.
Any initial plan can later be expanded to cover sensitive civilian systems to
protect financial, commercial and other vital infrastructure data."

The cyber security issue is a tricky one. For lack of a better option, the job of protecting government computer systems has fallen to the Department of Homeland Security (DHS), although the Air Force is an active player. The Navy and the Army also have their own programs.

I called James Lewis, an expert at the Center for Strategic and International Studies, to get some insight. He told me that the White House was becoming concerned because "DHS hasn't really done anything" on the issue of cyber security. "Some of it's internal squabbling" he says, "but they just can't seem to get their act together. You hear [Defense Secretary Robert] Gates and [Director of National Intelligence Mike] McConnell talking about it, but you never hear anything from [DHS Secrtary Michael] Chertoff."

So far, CNCI has been criticized for being too secretive, though the initiative is a step forward overall. In fact, it's good news that someone is finally starting to take this seriously. Both presidential candidates have expressed a committment to improving cyber security. Senator Obama has said he will appoint a "national cyber advisor" and will make the issue "the top priority that it should be in the 21st century." Senator McCain has pointed to a need to "invest far more in the federal task of cyber security" in order to protect strategic interests at home.

Knowing just who is supposed to be in charge of cyber security would be a good start. As Lewis points out, "It's not something you can do on an ad hoc basis like we've been doing for the past several years," adding, "We need to be better organized and better at assigning responsibilities."