Take a sneak peek at the new NIST.gov and let us know what you think!
(Please note: some content may not be complete on the beta site.).
Calling for Comments on Cybersecurity, Innovations and the Internet Economy
From NIST Tech Beat: June 21, 2011
The Department of Commerce's Internet Policy Task Force is requesting comments on a report that proposes voluntary codes of conduct to strengthen the cybersecurity of companies that increasingly rely on the Internet to do business, but are not part of the critical infrastructure sector.
The report, Cybersecurity, Innovations and the Internet Economy, focuses on the "Internet and Information Innovation Sector" (I3S)—businesses that range from small and medium enterprises and bricks-and-mortar firms with online services, to social networking sites and Internet-only business, to cloud computing firms that are increasingly subject to cyber attacks.
"Our economy depends on the ability of companies to provide trusted, secure services online," writes Commerce Secretary Gary Locke in the publication. "As new cybersecurity threats evolve, it's critical that we develop policies that better protect businesses and their customers to ensure the Internet remains an engine for economic growth."
Global online transactions are currently estimated by industry analysts at $10 trillion annually. As Internet business grows, so has the threat of cybersecurity attacks. The number of Internet malware threats was estimated to have doubled between January 2009 and December 2010. In 2010, an estimated 55,000 new viruses, worms, spyware and other threats were bombarding the Internet daily.
Cybersecurity, Innovation and the Internet Economy, makes a number of specific recommendations for reducing I3S vulnerabilities:
A June 15, 2011, Federal Register notice requests comments on the task force report by August 1, 2011. Comments should be emailed to SecurityGreenPaper@nist.gov with the subject line ''Comments on Cybersecurity Green Paper.'' The task force will continue to work with others in government to engage the domestic and global privacy community, and will consider publishing a refined set of policy recommendations in the future.