Reference no: EM132305890

Assignment

Prepare a 5 to 7 paragraph "Expert Opinion" for local government officials. This document should briefly present a strategy for communicating with residents about a new "cybersecurity" policy that places access restrictions upon the local government's online services website.

Background: Due to increased hacking attempts against the Service Request system, the local government adopted the new policy without allowing time for public comment. There has been a significant amount of backlash including a protest by sports coaches and youth group leaders who were unable to file reservation requests for ball fields and meeting rooms in local Parks & Recreation facilities.

The newly adopted "cybersecurity" policy requires two-factor authentication (logon/password, PIN) in order to gain access to online services. The registration form requires name, address, cell phone number, email address, date of birth, and the last four digits of the individual's social security number.

The PIN is sent to the cell phone number (text message) or email address each time an individual attempts to logon to the Service Request system. If the PIN is not entered correctly, the logon will fail and access to services will be denied.

Your "Expert Opinion" (document) should address the following issues:

1.How can the local government officials convince residents that this "invasion of privacy" (collection of personal information during account registration) is necessary and for their benefits?

2.Should the local government suspend implementation of the new policy for 90 days (180 days?) to allow members of the public to comment on the new policy? Why or Why not?

Provide in-text citations and references for 3 or more authoritative sources. Put the reference list at the end of your posting.

Project : Public-Private Partnerships for Cybersecurity

For this research project, you will be helping identify best practices and strategies for encouraging business participation in public-private partnerships designed to improve cybersecurity for various critical infrastructure sectors.

Your deliverable will be a research report which provides an overview of existing public-private partnerships, the types of cybersecurity improvements which are being addressed by such partnerships,the potential benefits to industry partners, and the potential risks and/or costs in resources.

Your report should also address the types of due diligence activities a company should engage in before committing to participation in information sharing and other public-private partnership activities.

Research:

1. Read / Review the Weekly readings.

2. Research the concepts and structures for public-private partnerships as a means of furthering public policy goals. Your starting resources are:

a. What are Public Private Partnerships (World Bank)

b. The Policy Cycle

3. Research existing or proposed public-private partnerships in cybersecurity and critical infrastructure protection. Here are some sources to get you started

4. Research the DHS led public-private partnership for Critical Infrastructure Cybersecurity improvements. You should also review the requirements and provisions of the NIST Cybersecurity Framework for Critical Infrastructure Protection. Find out why DHS is encouraging the adoption of this framework.

5. Find additional sources which provide information about public-private partnerships for cybersecurity, i.e. Information Sharing and Analysis Centers (ISACs) or Information Sharing and Analysis Organizations. Here are two overview /directory web pages to help you get started.

Write:

Write a five to seven page research report which includes a summary of your research. At a minimum, your report must include the following:

1. An introduction or overview for public-private partnershipswhich provides definitions and addresses the laws, regulations, and policies which permit this type of cooperation between federal, state, and local governments and private companies. This introduction should be suitable for an executive audience.

2. A separate section which provides an overview of public-private partnerships for cybersecurity which addresses the types of activities which a company could reasonably be expected to contribute to (e.g. information sharing, development of threat intelligence, development of risk profiles, etc.). You should provide 3 or more specific examples.

3. An analysis of whether or not participation in a public-private partnership is likely to have benefits for businesses (with specific examples of those benefits). After you address the benefits, address the problem of costs and/or risks which a company could expect to face (with specific examples). (One risk to consider is how much information about company operations could be exposed to the federal government.)

4. A set of recommendations or best practices for companies to engage in before committing to participation in a public-private partnership for cybersecurity. (Address the requirement for due diligence in decision making.)

5. A separate closing section in which you summarize your research and recommendation(s).