For example, SEI suggests that organizations pay close attention to systems and networks, investigate unusual activity and react quickly to intrusions. Organizations can also begin to include explicit security requirements when selecting server and host technologies, isolate the Web server from the organization's internal network and offer only essential network services and operating system services on the server host machine. Further, the scale of security practices will have to change as threats, system configurations or security requirements change. It is imperative that Federal agencies implement vigorous security programs that will enable them to closely watch information resources for signs of intrusion and to quickly react to intrusions when detected. Evidence, at best, is sketchy.
People are reluctant to release information on attackers.
We don't know. Throughout the Government and the U.S., we are dependent on the Internet. For efficiency, many have moved to the Internet. Should continue to look at unclassified information that could be considered mission critical. In the past, systems were self-contained.