REPORTS...: December 2008 Archives

DHS NIPP and NIMS Updates

The National Infrastructure Protection Plan (NIPP) Update is a stand-alone document that provides a brief overview of the most significant and relevant issues or changes to the NIPP since its release in June 2006. Because significant program changes were identified in late 2007 and realized in early 2008, a separate 2007 Update was not released. This document presents both 2007 and 2008 updates to the NIPP. DOWNLOAD

DHS Announces Revised National Incident Management System

DHS & FEMA have also released a revised National Incident Management System (NIMS) - the national standard for incident management.  NIMS establishes standardized incident management processes, protocols, and procedures that all federal, state, tribal and local responders will use to coordinate and conduct response actions. 

The revisions expand on the original version released in March 2004 by clarifying existing NIMS concepts, better incorporating preparedness and planning and improving the overall readability of the document. The revised document also differentiates between the purposes of NIMS and the National Response Framework (NRF) by identifying how NIMS provides the action template for the management of incidents, while the NRF provides the policy structure and mechanisms for national-level policy for incident management.  DOWNLOAD

The North American Electric Reliability Corporation (NERC), Princeton, NJ, and its Cyber Security Standard Drafting Team, have announced the release of phase one of proposed revisions to eight Critical Infrastructure Protection reliability standards for industry comment and review.

NERC PRESS RELEASE

PROPOSED STANDARDS

Hidden_Danger.jpg
A recent report by the Lexington Institute concludes that digital networks are the nervous system of our civilization, essential to commerce and culture. The entire economy, from banking to utilities to manufacturing to healthcare, relies on internet-style communications. Even the military has reorganized for what it calls "network-centric warfare."

But the internet empowers everybody, including criminals and foreign governments intent on weakening America. As digital networks have proliferated, so has malicious software designed to exploit the networks for destructive purposes. Internet predators are increasingly capable and sophisticated.

DOWNLOAD REPORT (.pdf)

Hacking The Hill

The National Journal Magazine has a sobering article concerning a 2006 attack on computers and networks in Congress. READ MORE

You are also encouraged to read the supporting material with the article!

Cisco 2008 Annual Security Report

This year's report reveals that online and data security threats continue to increase in number and sophistication. They propagate faster and are more difficult to detect.

Key report findings include:

  • Spam accounts for nearly 200 billion messages each day, which is approximately 90 percent of email sent worldwide
  • The overall number of disclosed vulnerabilities grew by 11.5 percent over 2007
  • Vulnerabilities in virtualization products tripled to 103 in 2008 from 35 in 2007, as more organizations embraced virtualization technologies to increase cost-efficiency and productivity
  • Over the course of 2008, Cisco saw a 90 percent growth rate in threats originating from legitimate domains; nearly double what the company saw in 2007
  • Spam due to email reputation hijacking from the top three webmail providers accounted for just under 1 percent of all spam worldwide, but constituted 7.6 percent of all these providers' mail

Fortunately, responses to these threats and trends are improving. Advances in attack response stem from the increased collaboration between vendors and security researchers to review, identify, and combat vulnerabilities.

Cisco 2008 Annual Security Report

Chemical Security 101

The Center for American Progress has released a report addressing the vulnerability to terrorist attack and accidents during day-to-day operations of the nation's 101 most dangerous chemical facilities.  READ MORE

Download the full report (pdf)

About this Archive

This page is an archive of entries in the REPORTS... category from December 2008.

REPORTS...: November 2008 is the previous archive.

REPORTS...: February 2009 is the next archive.

Find recent content on the main index or look in the archives to find all content.

Pages

Powered by Movable Type 5.12