Podcasts Government Government Information Security Podcast Don't Overload DHS with Cybersecurity Tasks

Don't Overload DHS with Cybersecurity Tasks

Published: Dec. 23, 2009, 8:22 p.m.

b'Mischel Kwon, Former Director
U.S. Computer Emergency Readiness Team\\n\\n

The growing role of the Department of Homeland Security in governing federal cybersecurity has its limits, says Mischel Kwon, who until this summer served as director United States Computer Emergency Readiness Team, the DHS agency that analyzes cyber threats and vulnerabilities in federal networks, disseminates cyber threat warnings information and coordinates national incident response activities.\\n\\n

Some lawmakers seek to give DHS additional authority, including the coordination of cybersecurity initiatives and review other agencies IT security budgets, but Kwon - now vice president of public sector security solutions at the security firm RSA - says that would be unadvisable. \\n\\n

"DHS has lot on plate right now in regards to cybersecurity. It\'s a new department and has a lot of growing and maturing to do, and I\'m not sure it\'s the right thing to put all eggs in one basket," Kwon, now a vice president at the security firm RSA, said in an interview with GovInfoSecurity.com. \\n\\n

Besides, Kwon said, various departments and agencies already have cybersecurity expertise in their areas, and the government should exploit that know-how through better coordination. "We already have relationships and intellectual knowledge in each one of these departments and agencies, and I think it\'s important that we understand how we collaborate as a government to make this work instead of setting up one silo entity to be cyber," Kwon said. "Just taking everything and dumping into DHS is actually going to hurt the cause."\\n\\n

Other topics addressed by Kwon in the interview:\\n\\n

How the government must redirect its thinking about information security away from computers and assets and toward departmental and agency missions.
\\n\\n
Reforming the Federal Information Security Management Act with or without new legislation.
\\n\\n
Reports linking her departure as head of U.S.-CERT along with other top cybersecurity officials as a symptom of the problems the government has in hiring and retaining top IT security talent.
\\n\\n

Kwon was interviewed by GovInfoSecurity.com\'s Eric Chabrow.\\n\\n

Kwon joined RSA in August. She headed U.S.-CERT from June 2008 to August 2009. previously, she served as chief IT security technologist within the Justice Department as well as its acting deputy director of IT security. Since 2006, she has served as an adjunct professor of cyber defense and leads the Cyber Defense Lab at George Washington University.\\n\\n

She earned a master in computer science from Marymount University and a master certificate in information assurance from George Washington University.'