Monday, March 24, 2003

Zeichner Report Hammers State Cybersecurity Efforts A report released this morning by Zeichner Risk Analytics criticizes the states for not developing appropriate cyber-security programs.  The report states that: "At some point, the states may need to leave development of all cyber-security and critical infrastructure guidance exclusively to the Federal government supported by professional organizations." Among the report's findings: 36 states have failed to prepare, adopt, and implement adequate cyber-security policies, as required by Congress. The lack of progress in the states requires insurance companies (and other companies regulated by the states) to waste considerable expense tracking implementation status. States have fallen even further behind the Federal government and financial services industry in developing appropriate cyber-security programs. I met with our State risk manager recently to discuss our cybersecurity efforts and am unaware of any insurance company efforts to track our cybersecurity program.  I am not aware of any such inquiries.  The report recommends adopting the proposed national regulation developed by the National Association of Insurance Commissioners.  I'm trying to figure out what that is.  The State's Insurance Dept. is just down the hall from me. [followup: the Deputy Insurance Commissioner passed along this link to Utah's rule on safeguarding customer information] The NAIC is certainly an active association based on their regular press releases. The report shows that 15 states are in full compliance with the Gramm-Leach-Blilely Act which requires the states to take specific action with respect to cyber-security measures and guidance.  Utah, along with Washington and Virginia, is among the 15 states in compliance.  Utah was very involved in infrastructure protection efforts and cyber-security measures prior to 9-11, partially due to its preparations for the 2002 Winter Games, but also in relation to its Y2K preparations. 9:43:16 AM    comment []

Purchasing Eliminates non-Electronic Options The Utah Division of Purchasing sent out the following announcement this morning: Effective April 15, 2003 we are changing our Bid Notification Service so that all bid notifications will be delivered to prospective bidders [only] via email. The Division posts all current bid solicitations and allows potential bidders to subscribe online to updates related to a specific bid.  In addition, vendors can subscribe on an annual basis to be notified of any commodity-specific offerings. 8:58:28 AM    comment []

Warblogs Warblogs are the hottest thing right now.  Here are a few: WarBlogCorner The Command Post Poliblog ibidem warblogs.cc Back to Iraq 2.0 Warblogging The Bagdad Blogger The official perspective: The Whitehouse: Operation Iraqi Freedom United States Central Command CNET news service discusses how blogs are addressing the war.  The Washington Post says that warblogs eliminate the middleman. 8:30:28 AM    comment []

© Copyright 2003 David Fletcher.