Security groups look at community needs, security governance

Agencies and companies need to determine what security warning information communities need and develop a framework for corporate security governance, officials said at this week’s National Cyber Security Summit. Five task forces formed this week at the summit have until March 1 to develop specific measures that will be implemented under the Homeland Security Department’s supervision, but officials have already identified several steps to make progress in the near-term. For example, the Cyber Security Early Warning task force plans to complete the draft of a comprehensive plan to identify information needs and establish guidelines for handling that data by the group’s next meeting on Dec. 17, said Guy Copeland, co-chairman of the task force and vice president of information infrastructure advisory programs at Computer Sciences Corp. That straw man document will be the basis for the real, practical solutions to be reported in March. Leaders also set a goal for each of the Early Warning task force members to develop a one-page proposal within two weeks for a small security warnings implementation in their own organization that could represent a “baby step” toward larger solutions, he said. Full Story