DHS head: Businesses need to focus on cybersecurity
Chertoff also calls for incentives to private sector
IDG News Service - WASHINGTON -- The U.S. Department of Homeland Security will focus significant efforts on cybersecurity and on working with private vendors to develop technologies designed to provide domestic security in the coming months, DHS Secretary Michael Chertoff said.
Chertoff, speaking yesterday at the InfraGard National Conference here, also called on private companies to make more of an effort to protect their cyberinfrastructures. He also said more incentives are needed for IT vendors to focus on cybersecurity. InfraGard is an organization started by the FBI to improve information sharing about critical infrastructure between the U.S. government and private industry.
One incentive for private companies to develop cybersecurity products would be to institute legal reforms that limit damages from product lawsuits, Chertoff said.
As an example, he cited the Support Anti-terrorism by Fostering Effective Technologies Act of 2002, which limits liability for products designed to combat terrorism. But he said Congress should go further in protecting companies from product lawsuits.
However, private companies should already have good reasons to protect their infrastructures, he said. "There's also a very strong business case to be made for private-sector investment in security," he said. "In today's threat environment, active security measures are critical to businesses themselves, because the cost of an attack will very, very greatly outweigh the cost of protection."
Chertoff didn't discuss a May report from the Government Accountability Office, which said the agency has "not fully addressed any" of its 13 key cybersecurity areas. But much of his talk at InfraGard was focused on cybersecurity, while most past DHS efforts have focused on physical security.
Most of what the DHS has identified as the U.S. critical infrastructure is controlled by computers, Chertoff noted, and most of that infrastructure -- such as the nation's electrical grid and financial networks -- is owned by private companies. Chertoff called for a "21st-century style of organization" that includes government agencies working closely with private companies to protect important national assets.
"We all recognize that protecting these vital national assets is a shared responsibility and a partnership," he said. "The Department of Homeland Security does not and should not own and control all these systems."
The DHS will look at "all aspects of cybersecurity" in the coming months as it hires a person to fill the newly created position of assistant secretary for cybersecurity, Chertoff said. The agency will work to further develop partnerships with private companies to protect cybersecurity, and cybersecurity will be an essential part of a national infrastructure protection plan that the DHS is working on, he said.
Chertoff also called on private industry
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The 12 PCI DSS 3.0 requirements addressed by Peer 1 Hosting This handy quick reference outlines the 12 PCI DSS 3.0 requirements, who needs to be compliant and how Alert Logic solutions address the...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- Mobile Policy Checklist Here's what to consider when putting together a mobile policy designed to support a highly productive workforce.
- Securing BYOD Mobile computing is becoming so ubiquitous that people no longer bat an eye seeing someone working two devices simultaneously. Individuals and organizations are...
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts