InfoSec a hot US political topic in 2006

According to the Electronic Privacy Information Center, nine US bills are pending that are related to information/data/privacy security:

  1. HR. 3140 Consumer Data Security and Notification Act (Bean)
  2. S. 1789 Personal Data Privacy and Security Act (Specter)
  3. S. 751 Notification of Risk to Personal Data Act (Feinstein)
  4. HR. 1069 Notification of Risk to Personal Data Act (Bean)
  5. S. 500 Information Protection and Security Act (Nelson)
  6. S. 768 Comprehensive Identity Theft Prevention Act (Schumer)
  7. S. 1336 Consumer Identity Protection Act (Pryor)
  8. S. 1408 Identity Theft Protection Act (Smith)
  9. HR. 1745 Social Security Number Privacy and Identity Theft Prevention Act (Shaw)

Fiberlight

Himawari LightI think this is brilliant (pun intended). It reminds me of the concept of armored spaces that protect the inhabitants while retaining visual/light capabilities, but this adds in a component of also powering itself. Plain glass windows have been ok, but they clearly have drawbacks (ok, sometimes the puns just jump out). In this case the UV is blocked by walls, while a solar panel collects energy and glass fibers distribute the light. So, fiberlight (plus video) should provide a radical reduction in risks while maintaining many benefits from windows.

Wonder what Milton would have said about this fine use of talent to produce technology that might protect those who speak out in favor of a republic and against the supreme executive (e.g. he feared he “lost his light” because of writings like “the Tenure of Kings and Magistrates” and his support of Cromwell)…

When I Consider How My Light Is Spent
by John Milton (1608-1674)

    When I consider how my light is spent
         Ere half my days in this dark world and wide,
         And that one talent which is death to hide
         Lodged with me useless, though my soul more bent
    To serve therewith my Maker, and present
         My true account, lest he returning chide,
         "Doth God exact day-labour, light denied?"
         I fondly ask. But Patience, to prevent
    That murmur, soon replies: "God doth not need
         Either man's work or his own gifts: who best
         Bear his mild yoke, they serve him best. His state
    Is kingly; thousands at his bidding speed
         And post o'er land and ocean without rest:
         They also serve who only stand and wait."

Alito described as threat to liberty

Senator Feinstein had some pretty clear warnings about the appointment of Alito, in her Judiciary Committee statement today. Apparently she feels the best thing for America is to vote against his nomination to the bench:

I listened carefully to the testimony of many legal specialists, including professors in constitutional law. I listened to Professor Tribe. And something he said really struck me.

This is what he said: ‘The court will cut back on Roe v. Wade step by step, not just to the point where, as the moderate American center has it, abortion is cautiously restricted, but to the point where the fundamental underlying right to liberty becomes a hollow shell.’

And then I began to think about all of the things the fundamental right to liberty in this country encompasses such as: end of life decisions, privacy of medical records, privacy from unwarranted government intrusion.

On February 6 we begin the discussion and hearings on an interpretation of the use of force resolution to countenance something that none of us ever thought it would countenance – a threat to this liberty interest.

And I came to the conclusion that the fundamental right to liberty is at issue with this nominee.

It has nothing to do with his qualifications and his credentials. But it does have something to do with how far we are willing to see this Court move to the right and out of the mainstream of legal thinking in this great country.

And I, for one, really believe that there comes a time when you just have to stand up, particularly when you know that the majority of people think as you do.

And I truly believe that. I really believe the majority of people in America believe that a woman should have certain rights of privacy, modified the state, but a certain right to privacy. And if you know that this person is not going to respect those rights, but holds to a different theory, then you have to stand up.

And so all of this is in answer to Senator Kyl, because this is a hard vote. But it is a vote that is made with the belief that legal thinking and personal views, especially at times of crisis, at times of conflict, and at times of controversy do mean something. And those of us that don’t agree with the view have to stand up and vote no.

And so I am one of those.

CObIT 4

Several people have asked me what’s new and different about the latest release of the Control Objectives for Information and related Technology (CObIT4). I have not read the official release yet from the Information Systems Audit and Control Foundation and IT Governance Institute (the primary backers) but here are some of the things that have stood out so far:

The framework has some basic rewording and reorganization that is intended to be more consistent with other standards, such as ITIL (convergence is good). For example Plan and Organize 8 (PO8) “Ensure compliance with external requirements” has been completely removed and the text transfered to a new Monitor and Evaluate 4 (ME4) “Ensure regulatory compliance”, which replaces the old ME4 “Provide for independent audit” since that was considered outside the scope of IT. Deliver and Support 8 (DS8) was renamed “Manage service desk and incidents” with Deliver and Support 10 (DS10) being renamed to “Manage problems”, which means problems will be handled separately. You get the idea…

There is also a shift from five resources to four:
– People
– Information (instead of “Data”)
– Applications
– Infrastructure (to replace both “Technology” and “Facilities”)

And the overall structure has been changed to
– Control over IT processes of…
– to satisfy the business requirement of…
– is achieved by…
– is managed by…
– and is measured by…