Information Assurance High Level Presentation

1
David W. Carey Vice President, Information
Assurance Oracle Corporation
Information Assurance Enabling Homeland Security
2
The Homeland Security ChallengeSecure
Information Sharing

Were going to knock down the information
stovepipes and turn them into pipelines.
Tom Ridge
3
Status quo from an information perspective

• Feast of information

• Famine of knowledge

4
Data access - the three basic approaches

• Data warehousing
• Distributed query
• Selected information sharing

5
Selected Information Sharing
Consolidate, Integrate
6
The IA Solution for the Enterprise
Users
Data
Privacy integrity of data
7
Balancing Requirements
Need flexibility to adjust to current situation
Usability
x
Performance
Security
8
Challenges
Technology
technology
Policy
Culture
And below the surface
9
Standards are the key

• Data
• Integration
• Security

10
Security Standards
11
System Certification and Accreditation

• NIST
• DoD - DITSCAP
• DCID 6/3

12
Evaluated Products

• Technology Evaluations Assurance
• NIAP
• Common Criteria
• FIPS

13
Cardinal Rule
Avoid the were special trap
Special
14
Policy Issues

• Whos in charge?

• Who pays?

• Whos the referee?

15
Critical Issues Semantics and Connotations

• Tank

• Agent

16

• Think big

• Start small

• Scale fast

17

Better is the enemy of good.
-Voltaire (1694-1778)