Resources for Federal Information Security Management Act (FISMA)

Cyber Security Trends by PTLB: The Art of Risk Management

www.bloggernews.net

A pertinent question that is often asked is who is responsible for the Cyber Security of a Nation? Is it the Nation, Public Sector or the Private Sector? The answer cannot be anything else but that it is a “Collective Responsibility” of all those who are using the Information and Communication Technology (ICT) for various purposes. The traditional concepts of “State’s Privilege” or “Sovereign Functions” have no significance in the era of ICT. The fact remains that no Cyber Security Strategy is effective till the “Collective” act coherently and in a holistic manner. There is another pressing and urgent concern that requires an immediate and apt solution. Is National ICT Security “Sufficient” to protect and preserve it from “Trans-National Threats”? A question that is never asked is who is responsible for the “Global Cyber Security”? When we cannot allow any person to attack our Nation in the “Real World” how can we allow “Cyber Wars” and “Cyber Terrorism” to exist and grow to our own detriment? This “Trend Analysis” of PTLB TM/SM and Perry4Law is both a “Caution” and “Appeal’ to consider this matter on “an urgent and collective basis”.

The National Institute of Standards and Technology (NIST), USA has issued a draft of Special Publication titled Managing Risk from Information Systems: An Organizational Perspective, for public appraisal and suggestions. The philosophy of NIST rightly enumerates that risk management is a balancing act which requires overt and coherent management decisions that trade off the utility and convenience of modern information systems against the potential for serious harm if they are misused. The process of risk assessment requires identifying potential threats and vulnerabilities and preparing adequate safeguards and measures to not only prevent network damages but also take remedial measures the moment a network is breached or exploited. Further, a road map of the impact of any anticipated vulnerability being exploited must be carved out along with its remedial measures. A sum total of all such assessments can provide a “use or avoid option” for any ICT Process or application.

View the Resource

Share or bookmarklet this web page at: