CISA's Palace: Congress backs new cybersecurity nerve-center for cyber-America's cyber-future The US House of Representatives has unanimously passed a bipartisan bill that would create a new agency to lead the federal government's cybersecurity efforts. The Cybersecurity and Infrastructure Security Agency (CISA) Act, passed earlier this year by the Senate, would overhaul the Department of Homeland Security (DHS)'s …
all well and good to have another well intentioned bureaucracy bleeping at overworked, underpaid and under trained staff. Useless if agencies have no money to buy supported hardware and software, let alone train staff. Worse than useless if the PHB levels are infected with techno-utopianism about AI, cloud and other trivia. So lets outsource the lot to lowest bidder so its not goverments fault when all systems belong to whomever. Oh JEDI again. This is a mind trick. Something being done, just not what the pundits thought.
The Cybersecurity and Infrastructure Security Agency (CISA) Act, passed earlier this year by the Senate, would overhaul the Department of Homeland Security (DHS)'s National Protection and Programs Directorate to create CISA as a new, stand-alone agency under the umbrella of the DHS.
Without a Sunset Rule to take away the authority of the DHS, all this will do is give us two agencies doing the same thing at twice the cost. Surely our Congress is smart enough to have put that into the bill, right?
This is Uncle Sam we're talking about.
Where do his priorities really lie? I expect that prominent among them are attacking the rest of the world (stuxnet? You ain't seen nothing yet ...), industrial espionage, and surveillence. And of course misinformation, pointing the finger of blame at scapegoat-of-the-day for their own actions.
Not that any of that excludes bona-fide defensive work against actual threats to them. Though it begs questions like whether staff will have immunity from the aura of fear created by arrests like Hutchins, and can they ever leave?
Where do his priorities really lie?
In more pork. There is no supporting legislation.
As a comparison the legislative leaders in that area - Israel, Russia, etc all have laws which specify criminal liability for not security the national infrastructure against cyberthreats as well as define in exact terms what is national infrastructure for that purpose. Similar bills are in the queue elsewhere around the world - lots of people are copying the Russian homework.
USA has very little of that and whatever it has is piecemeal and per-industry. As a result, it will be another PORK barrel with more parasites eating from the budget and little ability to force the private companies running the infrastructure in the USA to comply.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
