What is needed is a device or mechanism that is easily understood and focuses on the needs of the computer security professional. The government must establish a partnership with academia and the private sector if it is to compete for scarce computer professional resources. In a related area, a member from the audience offered that a FY00 budget amendment for Cyber Corps implementation was being prepared. The SPAB response to this was that too many agencies are in charge of computer security policy coupled with significant interest from various entities of the Legislative Branch. With so many in charge no one is truly in charge.
Critical networks transcend the classified and unclassified world in today s environment.
The SPAB suggested that government undertake an educational program explaining these new needs. They agreed that this issue is difficult, but the need dictates that we get started. A question was presented regarding the issue of no accountability for implementation of the security policies adopted by the Security Policy Board. The SPAB agreed that there has not been appropriate accountability for policy implementation. The JSC II addressed this issue.