米国会計検査院 国土安全保障省のサイバーセキュリティへの対応は不十分

　こんにちは、丸山満彦です。米国会計検査院が2005.07.19付けで、国土安全保障省のサイバーセキュリティへの対応が不十分という報告書を公表しています。

　
■GAO 2005.07.19
・Critical Infrastructure Protection: Challenges in Addressing CybersecurityGAO-05-827T
・・Abstract
・・Highlights-PDF
・・PDF

　例にあげられている不備は

＝＝＝＝
DHS has not yet developed national threat and vulnerability assessments or developed and exercised government and government/industry contingency recovery plans for cybersecurity, including a plan for recovering key Internet functions. Further, DHS continues to have difficulties in developing partnerships—as called for in federal policy—with other federal agencies, state and local governments, and the private sector.
＝＝＝＝

などです。

よく読んでみるといろいろありますね。しかし、GAOにこれだけいろいろと言われると、予算をつけて対応するしかないですよね・・・

　ところで、DHSのサイバーセキュリティ対応には13の役割があるそうで、その内容は次の通りだそうで・・・
＝＝＝＝
• Develop a national plan for critical infrastructure protection, including cybersecurity.
• Develop partnerships and coordinate with other federal agencies, state and local governments, and the private sector.
• Improve and enhance public/private information sharing involving cyber attacks, threats, and vulnerabilities.
• Develop and enhance national cyber analysis and warning capabilities.
• Provide and coordinate incident response and recovery planning efforts.
• Identify and assess cyber threats and vulnerabilities.
• Support efforts to reduce cyber threats and vulnerabilities.
• Promote and support research and development efforts to strengthen cyberspace security.
• Promote awareness and outreach.
• Foster training and certification.
• Enhance federal, state, and local government cybersecurity.
• Strengthen international cyberspace security.
• Integrate cybersecurity with national security.
＝＝＝＝

【おまけ】DHSについて、以前ちょっと紹介したこともありますが・・・
・ホームページ
・方向性・使命・目標
・予算
・組織図
・実績報告書

---

このブログの中の意見は私見であり、所属・関係する組織の意見ではないことをご了承ください。