Assignment: Cybersecurity in Government Organizations
Paper: Can we ensure that Open Data is useful AND secure?
Scenario:
A federal agency has asked your cybersecurity consulting firm to provide it with a white paper that discusses the issues of usefulness and security in regards to Open Data. The white paper is intended for a group of executives at the agency who are opposed to the planned conversion of its current controlled distribution for several highly valuable and frequently requested datasets (DVDs purchased through the Government Printing Office) to OPEN Data distribution via the government's Data.Gov portal (website). Currently, these data sets are purchased by businesses and academic institutions and are used for a variety of purposes.
A customer satisfaction survey revealed that purchasers are willing to change over to the new Open Data distribution method for data sets. But, the agency head has received phone calls from several large and politically well-connected customers who expressed concerns about potential issues with the integrity and authenticity of downloaded data. The agency's executives were also surveyed and they provided the following security-relateditems in a list of concerns for the planned conversion to an Open Data delivery method:
a. Confidentiality / Privacy (ensuring proper redaction)
b. Data integrity
c. Data authenticity
d. Availability (reliability) of the Open Data service (website)
e. Non-repudiation of data sets
Research:
1. Read / Review the weeklyreadings.
2. Research the federal government's OPEN Data mandate. Here are some sources that you may find useful:
a. Open Data Policy-Managing Information as an Asset - OMB Memorandum M-13-13(PDF file is in the week 2 readings). This Memorandum includes significant discussion of security issues and policy solutions including references to FIPS 199 and NIST SP-800-53)
b. U.S. Open Data Action Plan (see file us_open_data_action_plan.pdf in week 2 readings).
c. Guidance for Providing and Using Administrative Data for Statistical Purposes - OMB Memorandum M-14-06 (PDF file is in the week 2 readings). This Memorandum includes discussion of privacy and security issues arising from the use of information collected for statistical purposes (e.g. the Census, employment, economic data, etc.).
3. Research how government information, e.g. OPEN Data,is used by businesses and the general public.Here are some sources to get you started:
a. 7 Ways Companies Are Using the Government's Open Data.
b. Government open data proves a treasure trove for savvy businesses.
c. Open data: Unlocking innovation and performance with liquid information.
4. Research the issues that can arise when businesses depend upon the confidentiality, integrity, availability, authenticity, and non-repudiationof government provided Open Data. Suggested sources include:
a. Authenticating Digital Government Information.
b. Legal and Institutional Challenges for Opening Data Across Public Sectors.
c. Risk Analysis to Overcome Barriers to Open Data
d. Reconciling Contradictions of Open Data Regarding Transparency, Privacy, Security and Trust.
5. Find five or more best practice recommendations for ensuring the security (confidentiality, integrity, availability, authenticity, non-repudiation) of information provided by the federal government through its OPEN Data initiative. N.B. For the purposes of this assignment, you may treat "licensing" concerns as an "availability" issue.
Write:
Write a five to eight page summary of your research. You should focus upon clarity and conciseness more than length when determining what content to include in your paper. At a minimum, your summary must include the following:
1. An introduction or overview of OPEN Data which provides definitions and addresses the laws, regulations, and policies which require federal agencies to identify and publish datasets and information collections. Discuss the role of the executive branch's Open Data / Open Government policies in making data available via Data Gov. This introduction should be suitable for an executive audience.
2. A separate section in which you discuss the value (benefits) of Open Data. This section should provide several specific examples of how government provided Open Data is being used by businesses and the general public.
3. A separate section in which you addresssecurity issues (confidentiality, integrity, availability, authenticity, and non-repudiation ) which can impact the usefulness of Open Data and how these issues are currently being addressed by the federal policies and plans for Open Data. Again, you should provide examples of issues and mitigations or solutions.
4. A section in which you address best practice recommendations for ensuring the confidentiality, integrity, availability, authenticity, and non-repudiation of Open Data.
5. A separate section in which you summarize your research and recommendations.
Attachment:- Basic-Paper-Template.rar