Kundra picks up cybersecurity mantle

The Obama administration’s plans to review government cybersecurity gained a new champion with the appointment of Vivek Kundra as federal chief information officer.

The Office of Management and Budget last week released an annual report on agencies’ implementation of the Federal Information Security Management Act (FISMA) and said OMB will will assess the metrics agencies report to show their compliance with that law. OMB also said it might develop new metrics to improve information security.

Kundra, also serving as OMB administrator for e-government and information technology, picked up the charge immediately. On the day he was appointed, he told reporters that the government needs to shed the mentality that reports and processes are the most important aspects of cybersecurity. Instead, he said, the focus needs to be on the fundamental security of “what I call the engine for the modern economy when it comes to cyber infrastructure.”

FISMA's critics have argued that agencies' compliance with the law can too easily become a matter of filling out the paperwork to document rote compliance rather than implementing effective security measures.

The government needs to think through cybersecurity in a broader context, Kundra said. The administration needs to consider how the government self-organizes, especially given that much of the government's processes and data flows through private infrastructure as well as the government.

It is important, he said, “that we look at these reports and think of them beyond just the federal government.”

About the Author

Ben Bain is a reporter for Federal Computer Week.

Featured

  • Comment
    Pilot Class. The author and Barbie Flowers are first row third and second from right, respectively.

    How VA is disrupting tech delivery

    A former Digital Service specialist at the Department of Veterans Affairs explains efforts to transition government from a legacy "project" approach to a more user-centered "product" method.

  • Cloud
    cloud migration

    DHS cloud push comes with complications

    A pressing data center closure schedule and an ensuing scramble to move applications means that some Homeland Security components might need more than one hop to get to the cloud.

  • Comment
    Blue Signage and logo of the U.S. Department of Veterans Affairs

    Doing digital differently at VA

    The Department of Veterans Affairs CIO explains why digital transformation is not optional.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.