Transportation's plan more than just products
- By Brian Robinson
- Mar 09, 2003
The Transportation Department's integrated incident management program is only the start of what Lisa Schlosser, DOT's associate chief information officer for information technology security, said is a process leading to a world-class IT security strategy.
During the three-year development period, DOT officials will:
* Improve DOT's IT security strategy.
* Fully integrate IT security into main business and organizational processes, such as DOT's enterprise architecture.
* Refine critical management programs, such as certification/accreditation, incident response and training/awareness.
* Deploy more robust network- and system-level controls.
After the initial three-year period, Schlosser said, DOT officials will use the incident management system as a baseline from which to monitor compliance while continuously improving DOT's security infrastructure by adding newer, state-of-the-art products.
Brian Robinson is a freelance writer based in Portland, Ore.