The growing trend of government involvement in IT security

ABSTRACT

In today's society, information security has come to the forefront of discussion, especially as terrorism, illegal corporate activities, and cyber crime incidents are increasing. The government is now taking on a larger role in determining standards and regulations for information security within IT, and it is having definite impacts and effects throughout a variety of industries. From the Gramm-Leach Bliley Act, to Sarbanes-Oxley, to HIPAA, the government continues to pass legislation that promotes some control over securing information. Initiatives continue at present to further this influence into more security areas as well. Impacts to corporations involve updating architecture, policy, and integrating systems. Effects to organizations are both positive and negative, but the question must be raised as to what the true implications of government involvement entail, and whether it is a positive or negative trend.

REFERENCES

• 1: AICPA. (9 June 2004). Summary of Sarbanes-Oxley Act of 2002. Retrieved June 9, 2004 from <u>http://www.aicpa.org/info/sarbanes_oxley_summary.htm.</u>
• 2: Carr, K. & Duffy, D. (September 2003). For the Love of Privacy. CSO. Retrieved June 14, 2004 from <<u>http://www.csoonline.com/read/090103/briefing_briefing_privacy.html</u>
• 3: Datz, T. (December 2003). As the Federal Government's Influence Over Security Practices Grows, CSOs have a Few Suggestions for Improving Public-Private Partnerships. CSO. Retrieved June 2, 2004 from <u>http://www.csoonline.com/read/120103/ideas.html.</u>
• 4: ED.gov. (n.d.) Family Educational Rights and Privacy Act (FERPA). Retrieved June 25, 2004 from <u>http://www.ed.gov/policy/hen/huid/fpco/ferpa/index.html.</u>
• 5: Electronic Privacy Information Center. (n.d.). The Gramm-Leach-Bliley Act. Retrieved June 10, 2004 from <u>http://www.epic.org/privacy/glba/</u>
• 6: Electronic Privacy Information Center. (n.d.). "Terrorism" Information Awareness (TIA). Retrieved June 10, 2004 from <u>http://www.epic.org/privacy/profiling/tia/</u>
• 7: Garretson, C. (01 September 2003). Under the Gun: Compliance with new security and privacy regulations falls squarely on IT departments. Network World. Retrieved June 27, 2004 from <u>http://www.nwfusion.com/research/2003/0901regs.html?page=1</u>
• 8: Georgia General Assembly. (2003). Section 16-9-93. Retrieved June 28, 2004 from <u>http://www.legis.state.ga.us/cgibin/gl_codes_detail.pl?code=16-9-93</u>
• 9: Georgia General Assembly. (2003). Section 16-9-93.1. Retrieved June 28, 2004 from <u>http://www.legis.state.ga.us/cgibin/gl_codes_detail.pl?code=16-9-93.1</u>
• 10: Gue, D. (2003). The HIPAA Security Rule (NPRM): Overview. HIPAAdvisory. Retrieved June 14, 2004 from <u>http://www.hipaadvisory.com/regs/securityoverview.htm</u>
• 11: Hewitt, C. (2004). HIPPA/Secure: Security Q/A. HIPAAdvisory. Retrieved June 10, 2004 from <u>http://www.hipaadvisory.com/action/secureqa/secure.htm</u>
• 12: Hoofnagle, C., Dolah, M., & Mierzwinski, E. (14 October 2003). Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice. Retrieved June 6, 2004 from <u>http://www.epic.org/privacy/glba/noticecomments.html.</u>
• 13: House Committee on Financial Services. (2003). The Sarbanes-Oxley Act: The First Year, Retrieved June 6, 2004 from <u>http://216.239.39.104/search?q=cache:uMCvINDhNs8J:www.fei.org/news/finrep/files/Sarbanes-Oxley_report.pdf+sarbanes-oxley&hl=en&start=45<&start=45<</u>
• 14: Jackson, W. (25 May 2004). Group Wants Input On Vulnerability Reporting Guidelines. GCN. Retrieved June 7, 2004 from <u>http://www.gcn.com/cgibin/udt/im.display.printable?client.id=gcndaily2&story.id=26045<</u>
• 15: Jackson, W. (10 July 2003). Putnam: Cybersecurity Laws Coming. GCN. Retrieved June 7, 2004 from <u>http://www.gcn.com/cgibin/udt/im.display.printable?client.id=gcndaily2&story.id=2 2714<</u>
• 16: Lettice, J. (20 May 2004). 'Spot the Terrorist' System Was Pitched to Cheney by Jeb Bush. The Register. Retrieved June 10, 2004 from <u>http://www.theregister.co.uk/2004/05/20/terror_prediction/print.html</u>
• 17: Mara, J. (20 May 2004). CAN-SPAM Gets Mixed Reviews in Senate Testimony. Internetnews. Retrieved June 14, 2004 from <u>http://www.internetnews.com/ecnews/print.php/3357141</u>
• 18: Miller, J. (27 May 2004). GAO: Data Mining Popular With Agencies. GCN. Retrieved June 7, 2004 from <u>http://www.gcn.com/cgibin/udt/im.display.printable?client.id=gnedaily2&story.id=26062<</u>
• 19: Parkinson, J. & Bloom, S. (June 2003). Surviving Sarbanes-Oxley. Optimize. Issue 22. Retrieved June 10, 2004 from <<u>http://www.optimizemag.com/article/showArticle.jhtml</u>
• 20: Spamhaus. (n.d.). United States set to Legalize Spamming on January 1, 2004. Retrieved June 14, 2004 from <u>http://www.spamhaus.org/news.lasso?article=150.</u>
• 21: Sullivan, A. (27 May 2004). Government Computer Surveillance Rings Alarm Bells, Computerworld. Retrieved June 7, 2004 from <u>http://www.comoputerworld.com/securitytopics/security/privacy/story/0,10801,93463,00.html</u>
• 22: Sutton, J. (21 May 2004). Database Firm Listed 120,000 'Likely Terrorists'. Computerworld. Retrieved June 7, 2004 from <u>http://www.computerworld.com/databasetopics/businessintelligence/datamining/story/0,10801,93328,00.html</u>
• 23: Swibel, M. (02 June 2004). Software Security Wars. Forbes.com. Retrieved June 2, 2004 from <u>http://www.forbes.com/business/businesstech/2004/06/02/cz_ms_0602beltway.html</u>
• 24: Trade Commission. (n.d.). Financial Privacy: The Gramm-Leach Bliley Act. Retrieved June 6, 2004 from <u>http://www.ftc.gov/privacy/glbact/</u>
• 25: Varon, E. (15 November 2003). Debate Heats Up Over Data Privacy, Terror Fight. CIO. Retrieved June 9, 2004 from <u>http://www.cio.com/archive/111503/tl_washington.html</u>
• 26: Worthen, B. (15 May 2003). Your Risks and Responsibilities. CIO. Retrieved June 9, 2004 from <u>http://www.cio.com/archive/051503/rules.html</u>
• 27: Zetter, K. (14 June 2004). The Son of Patriot Act Rises. Wired News. Retrieved June 14, 2004 from <u>http://www.wired.com/news/print/0,1294,63800,00.html</u>

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Legal Aspects, Security

Keywords:
awareness training, information security