Digital Signature MultiState Summit: Role of States in Critical Infrastructure Protection

1
Digital SignatureMulti-State SummitRole of
States in Critical Infrastructure Protection

• Lee M. Zeichner, Esq.
• LegalNet Works Inc.
• August 2000

2
Argument Critical Infrastructure Protection

• Certain critical services
• National security, national economic security,
  health
• States and industry Own and operate service
  delivery
• Federal government policy partner with
  owner/operators
• Risk management framework
• Not regulate, control manage risk to priorities
• Technology enabler
• States/Technology communities Need to been heard

3
History Provides Basis for Argument

• Physical infrastructure issue Oklahoma City
  1995
• Presidents Commission on CIP Cyber 1997
• PDD 63 1998
• Prioritize critical infrastructure service
  delivery
• Focus on cyber challenges
• Partner with industry and states to resolve
• National Plan Information Systems Protection -
  2000
• Version 1.0 Set forth policy battlefield

4
Delivery of critical services four governance
options

• 1. Law Enforcement Problem FBI and state police
• 2. Consequence Management FEMA/State responders
• 3. Government Information Resources Management

5
Or, Risk Management

• Risk Management manage reliability/risk
• There are priorities
• Feds dont own, cannot control
• Traditional relationships undermine
• Industry coopetition (cooperate on trust)
• Information sharing is key - Cannot regulate
• Technology must be leveraged

6
Role of State Governments

• States own and operate service delivery
• How to manage with limited resources Risk
  assessments
• Ask tough questions
• What is critical?
• What are threats?
• What are vulnerabilities?
• Complex public-policy choices
• Restructure government entities
• Choose Privacy vs. Security with critical
  service delivery
• Leverage Education, training, awareness

7
States National Plan InputVersion 2.0

• At least two issues
• Relationship with federal government?
• How to leverage technology?
• Federal government role?
• Stay away?
• Fund research development?
• Regulatory relief?
• Technology Separate sector?

8
Who to contact

• Federal coordination via the CIAO
• Critical Infrastructure Assurance Office
• John Tritak, Director
• 202/482-7468 or email John.Tritak_at_ciao.gov
• Lee Zeichner, LegalNet Works Inc.
• 703/536-8767 or email admin_at_leglnet.com