We also need to continue to develop and improve the technologies available to detect security breaches and protect system resources. NIST is very active in these areas as I pointed out earlier in my testimony. Second, we must establish and implement effective security and administration practices. NIST is also active in developing and distributing information on recommended security practices, but it is ultimately up to the local resources in any organization to commit to and implement an effective plan. Third, we must continue to develop laws appropriate to IT security and enforce them diligently.
Internet security is everyone's business.
Risks abound at all levels of usage from routine computer usage of office applications, to the increasingly popular implementations of Linux with its many inherent security risks, to financial systems and basic social infrastructure systems such as electric power and telecommunications. We must keep in mind that while viruses are threats to security, they are by no means the only ones. NIST, along with other government agencies and private industry, must continue to aggressively pursue a comprehensive program of research, measurements and standards to assure a highly secure information infrastructure in support of our country's ever increasing reliance on computers and network technologies. I want to thank you again for the opportunity to speak before the Subcommittee on NIST's computer security activities and the recent virus concerns. We at NIST look forward to working with your committee and others in the Congress on this important issue.