U.S. intelligence community faces info-sharing overhaul
Computerworld - The U.S. intelligence community knows it has to improve the efficiency of its information-sharing efforts. But the community's IT experts also know that massive change doesn't mean starting from scratch and giving everybody access to everything.
"We're trying to use the existing [IT] capabilities of the community," said Bill Dawson, the intelligence community's deputy CIO. That means leveraging the massive yet classified investment in IT systems and infrastructure that has taken place during the past decade, said Dawson and other top intelligence officials. Dawson's post lies within the CIA director's community management staff, which has oversight responsibilities for all 14 agencies that make up the U.S. intelligence community.
But homeland security information sharing poses unique security challenges that few people outside the intelligence community appreciate, Dawson said. For example, intelligence agencies are for the first time being asked to share information collected from highly sensitive sources with agencies that sit outside of the traditional boundaries of the intelligence community, such as the Environmental Protection Agency (EPA) and the Department of Agriculture, according to Dawson.
"You really shouldn't have EPA officials surfing through military order-of-battle information," said Dawson. "I can run a wire and give you information, but what do you want, what do you need, and what are you going to do with it?"
Those are questions senior intelligence officials are grappling with as they anticipate the likely creation of a Department of Homeland Security, which will need access to highly compartmented intelligence data. And despite high-profile data-sharing failures in the past few yearsSept. 11 being the worsta master architecture plan has been in the works and is now getting the attention it deserves.
The centerpiece of that plan is the Intelligence Community System for Information Sharing (ICSIS). It's a Web-based system that comprises both the Top Secret Joint Worldwide Intelligence Communications System and the Secret Internet Protocol Routing Network, which the defense and intelligence communities have been using for years to share data. The difference now is that Dawson and others are working to build a browser-based front end that won't take users directly to these systems but rather to a role-based common virtual collaboration space.
Sharing Secrets
ICSIS will provide the controlled interfaces that will for the first time let the intelligence community automate the process of stripping out from classified documents top-secret sources and methods of intelligence collection. It will also automate the sharing of that intelligence with analysts and officials with "Secret" or lower security clearances.
Phase 1 of ICSIS development, which is now under way, involves various collaboration "enablers," such as public-key infrastructure encryption technology; a directory of intelligence analysts who can be contacted by means of encrypted community e-mail; a collaboration software tool suite; trusted interfaces for access to replicated data repositories at different security levels; and a metadata markup process to support data discovery.


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Driving Secure Enterprise File Sharing and Syncing in the Enterprise
- GroupLogic's new activEcho is the industry's only secure Enterprise File Sharing and Synching solution that balances the need for simplicity for the end...
- The Enterprise File Sharing Option
- Enterprises and IT departments need to address several critical security issues when considering file sharing and syncing products. Many of today's solutions do...
- Security Strategies to Virtualizing Internet-Facing Applications
- The IT organization at Intel has set a goal to transition their enterprise to a private cloud for their Office and Enterprise applications....
- Cloud Security Planning Guide
- Cloud security considerations span protecting hardware and platform technologies in the data center to enabling regulatory compliance and defending cloud access through different...
- Cloud Security Vendor Round Table
- This vendor round table guide will help you to evaluate different cloud technology vendors and service providers based on a series of questions... All Security White Papers
- Live Webcast
Data Privacy and Protection in Production Environments: New Research from Ponemon Institute - Date: Wednesday, June 13, 2012, 1:00 PM EDT / 10:00 AM PDT
In a recent study conducted by Ponemon Institute, fifty-five percent of respondents... - Data Privacy and Protection in Production Environments: New Research from Ponemon Institute
- Date: Wednesday, June 13, 2012, 1:00 PM EDT / 10:00 AM PDT
In a recent study conducted by Ponemon Institute, fifty-five percent of respondents... - Security Certifications 101 - BlackBerry and all those acronyms what do they mean and why they matter?
- FIPS, Common Criteria, CAPS, AISEP, NFC, NIST, Fraunhofer SIT, CESG, DSD - these are just some of the government and industry certifications which...
- BlackBerry PlayBook OS 2.0 Security Overview
- The presentation provides an overview of BlackBerry PlayBook OS 2.0 security capabilities and features, including: BlackBerry® Balance™ technology, BlackBerry® Bridge, data-at-rest protection, and...
- BlackBerry NFC Security Overview
- The presentation on NFC security will provide an overview of the security protections built into the BlackBerry platform to protect users, application developers...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts