Ce diaporama a bien été signalé.
Nous utilisons votre profil LinkedIn et vos données d’activité pour vous proposer des publicités personnalisées et pertinentes. Vous pouvez changer vos préférences de publicités à tout moment.

Information Sharing and Protection

2 409 vues

Publié le

David Bray, 'The Need for Achieving Information Sharing and Information Protection', talk at the OII, 8 April 2011. David works on creating an information sharing environment for the US government.

Publié dans : Technologie
  • Login to see the comments

  • Soyez le premier à aimer ceci

Information Sharing and Protection

  1. 1. The Need for Achieving Appropriate Information Sharing and Information Protection David A. Bray, PhD, MSPH [email_address]
  2. 2. What is the ISE? <ul><li>What is the ISE? </li></ul><ul><li>Post-9/11 Information Sharing </li></ul><ul><li>Towards Information Sharing and Protection </li></ul><ul><li>On-going ISE Development Efforts </li></ul>
  3. 3. What is the ISE? <ul><li>Information Sharing Environment (ISE) spans </li></ul><ul><li>Federal, State, Local, and Tribal Agencies; </li></ul><ul><li>Private Sector; and </li></ul><ul><li>International Allies </li></ul>Defense Intelligence Homeland Security Diplomacy Law Enforcement Range of Missions Communities Information Sharing Environment Terrorism-related <ul><li>Frontline </li></ul><ul><li>Investigators </li></ul><ul><li>Analysts </li></ul><ul><li>Operators </li></ul>
  4. 4. What is the ISE? <ul><li>Established: </li></ul><ul><ul><li>Post-9/11 Commission Reforms w/ the Intelligence Reform and Terrorism Prevention Act of 2004 </li></ul></ul><ul><li>Purpose: </li></ul><ul><ul><li>Align and leverage policies, processes, technologies, and systems </li></ul></ul><ul><ul><li>Promote timely, actionable, relevant information sharing re: counter-terrorism, WMD, and homeland security </li></ul></ul><ul><ul><li>Protect information, privacy, and civil liberties </li></ul></ul>
  5. 5. Post-9/11 Information Sharing <ul><li>300+ million people </li></ul><ul><li>50 States </li></ul><ul><li>3,000+ counties </li></ul><ul><li>500+ Federally recognized Indian Tribes </li></ul><ul><li>18,000+ Law Enforcement Organizations </li></ul><ul><li>1 million+ security personnel </li></ul><ul><li>U.S. law provides for a reasonable expectation of privacy for all U.S. persons. </li></ul>
  6. 6. Post-9/11 Information Sharing 2004 2006 - 2008 2005 <ul><li>Global Justice (GLOBAL) Fusion Center Guidelines </li></ul><ul><li>President approves recommendations submitted pursuant to 2005 Guidelines Memorandum </li></ul><ul><li>The “Implementing Recommendations of the 9/11 Act” </li></ul><ul><li>Transfer of the President’s authorities in IRTPA to the PMISE. </li></ul><ul><li>President issues the National Strategy for Information Sharing </li></ul><ul><li>President issues Memorandum standardizing sensitive but unclassified information – Controlled Unclassified Information (CUI) </li></ul><ul><li>GAO reviews the Information Sharing Environment </li></ul><ul><li>Baseline Capabilities for Fusion Centers Issued </li></ul><ul><li>Nationwide SAR Initiative (NSI) pilot project launched by PM-ISE with DOJ, FBI, and DHS </li></ul><ul><li>PM-ISE Opens </li></ul><ul><li>EO 13388 further strengthening the sharing of terrorism information to protect Americans, Establishes an interagency Information Sharing Council to advise the President </li></ul><ul><li>Presidential guidelines and requirements in support of the terrorism Information Sharing Environment </li></ul><ul><li>DOJ and DHS sign NIEM Memorandum of Understanding </li></ul><ul><li>9/11 Commission Report </li></ul><ul><li>EO 13354 creates National Counterterrorism Center </li></ul><ul><li>EO 13356 strengthens terrorism information sharing (revoked by EO 13388) </li></ul><ul><li>IRTPA establishes calls for an Information Sharing Environment ; creates PM-ISE </li></ul>2010 <ul><li>Attorney General opens a Program Office for the Nationwide SAR Initiative </li></ul><ul><li>SBU Interoperability project launched </li></ul><ul><li>President appoints new Program Manager </li></ul><ul><li>White House Issues FY12 ISE Programmatic Guidance </li></ul><ul><li>EO 13549 establishes a uniform Classified National Security Program to facilitate sharing of classified information with SLTPS entities </li></ul><ul><li>EO 13556 establishes a uniform program for managing unclassified information that requires safeguarding or dissemination controls (CUI) </li></ul><ul><li>PM launches dialogue for updating National ISE Strategy </li></ul><ul><li>Fusion Center Baseline Capabilities Nationwide Assessment Complete </li></ul>2009 <ul><li>EOP reaffirms need to enhance national security through an ISE </li></ul><ul><li>National Security Staff organized to include Senior Director for Information Sharing </li></ul><ul><li>Information Sharing & Access IPC Created </li></ul><ul><li>White House Issues FY11 ISE Programmatic Guidance </li></ul><ul><li>SAR Functional Standard updated </li></ul><ul><li>NSI Pilot completed; plans for nationwide implementation </li></ul><ul><li>Attorney General and DHS Secretary issue recommendations on CUI </li></ul>
  7. 7. <ul><li> Mission Partners Build and </li></ul><ul><li>Operate the ISE </li></ul>Post-9/11 Information Sharing 2007 2008 2009 2010 2011... ISE Priorities NARA NCTC DOJ DHS DHS DoJ, ODNI, DHS, FBI FBI, ODNI, DHS, DOD Controlled Unclassified Information (CUI) Interagency Threat Assessment and Coordination Group (ITACG) Nationwide SAR Initiative (NSI) Fusion Center (FC) Cargo Screening Assured SBU/CUI Interoperability Assured Secret Network Interoperability
  8. 8. Towards Sharing and Protecting <ul><li>“… There is also a clear connection between cybersecurity and information sharing. The same technology that will help improve information sharing is a critical part of protecting …” </li></ul><ul><li>“… Regular, automated compliance and behavior audits will not only protect privacy and make possible authorized use of information, they will greatly enhance the government’s ability to monitor misuse of its information networks…” </li></ul>-Markle Foundation, “Nation At Risk: Policy Makers Need Better Information to Protect the Country”
  9. 9. Towards Sharing and Protecting <ul><li>Protection and Sharing Represent Two Sides of the Same Coin </li></ul>
  10. 10. Towards Sharing and Protecting <ul><li>Provide information sharing and protection mechanisms to ISE participants </li></ul><ul><li>Ensure protection of privacy, civil liberties, and sensitive information appropriately </li></ul><ul><li>Support authentication, authorization, and access control processes to discover data and services on all networks </li></ul><ul><li>Enable access control policies to be managed and enforced at the enterprise level, to include audits that both inform protection and sharing trends </li></ul>
  11. 11. On-going ISE Development Efforts <ul><li>Building a National Integrated Network of Fusion Centers </li></ul><ul><li>Continuing Implementation of the Nationwide SAR Initiative </li></ul><ul><li>Establishing SBU/CUI Network Interoperability </li></ul><ul><li>Improving governance of the classified National Security Information Program </li></ul><ul><li>Advancing Implementation of CUI Policy </li></ul>
  12. 12. <ul><li>Aspirations: Achieve loosely coupled and interoperable enterprise-level applications and services, appropriately protecting privacy and sensitive information </li></ul>On-going ISE Development Efforts
  13. 13. <ul><li>Achieve interoperability across the Enterprise Architectures of agencies across Federal, State, and Local levels of government </li></ul><ul><li>Empower agencies to reuse standardized information exchange components to achieve appropriate sharing and protection of information </li></ul>On-going ISE Development Efforts
  14. 14. On-going ISE Development Efforts Requirements Across Departments and Agencies Interagency Information Integration Architecture and Governance Service Specifications, Including Reusable Components and IEPDs Contracted for Development by Industry or Government Reuse by Other Departments and Agencies Build, Test, and Certify Services, Reusable Components, and IEPDs  Greater Reuse Across Government of Services, Components, and IEPDs  Greater Demand Signal to Industry to Develop Standard Interagency Services
  15. 15. Questions? David A. Bray, PhD, MSPH [email_address] www.ise.gov <ul><li>Sign up for Email Alerts to get the latest on: </li></ul><ul><ul><li>National ISE Strategy </li></ul></ul><ul><ul><li>ISE Activities </li></ul></ul><ul><ul><li>Blogs and News </li></ul></ul>