The US federal government is locking down its networks through an ambitious and fast-paced effort to eliminate connections to the Internet that are vulnerable to attack.
In the past nine months, the feds have reduced the number of external network connections they operate from more than 8,000 to about 2,700. By next year, the feds plan to have fewer than 100, many of them shared by multiple agencies.
It's an approach experts say large private-sector organizations would do well to emulate.
The federal government's remaining Internet access points will have state-of-the-art security policies and managed security services, including antivirus, firewall, intrusion detection and traffic monitoring.
Bush administration officials say the consolidation effort will help agencies fend off a barrage of viruses, worms, denial of service and other attacks, while improving their ability to respond when a hacker gets through its multilayered defenses.
"It will reduce our risk," says Karen Evans, administrator for E-Government and IT in the Office of Management and Budget (OMB). "We will have better situational awareness for what's happening on our networks so we can take actions that will help enhance the trust of the American people that we are protecting their information."
OMB announced the Trusted Internet Connections (TIC) initiative in November. It joins several other administration efforts designed to bolster cybersecurity, including encrypting data on laptops and migrating agencies to a standard desktop operating system configuration.
The nation's leading carriers -- AT&T, Level 3, Qwest, Sprint and Verizon -- are drafting proposals due in mid-August to provide managed security services for the remaining Internet gateways. The government plans to award contracts in November to some or all of these carriers to support the TIC initiative.
"The federal government has got an onslaught of cyberattacks from foreign entities, and it needs to do something pretty quickly," says Diana Gowen, senior vice president and general manager of Qwest Government Services. "This whole TIC initiative has caused civilian agencies who one could argue are not as security savvy as the intelligence community and the Defense Department to really button things up."
"Internet access, if it's not managed properly, can provide security risks," says Susan Zeleniak, vice president of Verizon Federal. "The government is looking for a way to consolidate that access to make it easier and more efficient to apply appropriate security. . . . The government will see the benefits of this immediately."
Industry observers expect the TIC initiative to continue regardless of who wins the election in November.
"Cybersecurity is such a crucial issue across the whole economy, not just the government," says Ray Bjorklund, senior vice president at FedSources, a market research firm. "Everyone recognizes that there are so many threats out there. The more points of failure you have, the more likelihood you are going to have a failure. The TIC initiative makes sense."
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Making the Business Case for IT Consolidation
IT Service Management Needs and Adoption Trends: An Analysis of a Global Survey of IT Executives
Business Intelligence and Enterprise Performance Management: Trends for Emerging Businesses
Delivering the Power of Choice with Microsoft Dynamics CRM
Email Archiving 101—Customer Case Study
Discover the advantages of an open architecture multi-vendor network solution
Best Practice in Building an Integrated Information Management Strategy
Achieving the impossible: Unlimited application scalability
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Fortinet November Threatscape Report Shows Calm Before Holiday Storm 2008-12-05 16:00:00+11
Epicor® Cited as an Order Management Solutions Leader by Independent Research Firm 2008-12-05 15:52:00+11
F-Secure: Growth In Internet Crime Calls For Growth In Punishment 2008-12-05 13:00:00+11
International researchers gather in Sydney to preview the clever web 2008-12-05 09:48:00+11
Borderless corporate networks to shift focus to secure content management in Australia in 2009 2008-12-04 16:06:00+11
Enterprise Wireless WLAN Security
Learn more about the security challenges to be faced when defining and implementing security mechanisms within diverse wired and wireless network environments. Download this must-read guide to plan your wireless data protection strategy now.












