I agree with you largely, though I know where Banisar is coming from. Industry shouldn't be specifically protected more than they normally are--particularly with auditing information. But why are they even mentioned? That's the real question. When did the Fortune 500 become part of the government or "national infrastructure"?

If the governent suspects a corporation of illicit activity (or, more likely, someone in their company is under suspicion) then an investigation should be treated like any other--confidential until charges are brought forth. The same is true if they believe they may be victim of illicit activity. 'Cyber-security' changes nothing in that regard. I would hate to envision a day where the government is sharing huge volumes of information with Fortune 500 companies precicely *because* it could then be made public and subject to the FOIA. The FBI having access to highly sensitive information of Fortune 500 companies..? That's frightening. Up to now, they haven't proven able enough to keep even a few secrets from leaking out, much less thousands.

The major problem seems to be defining what should be included within the reach of government oversight/protection and what shouldn't be--particularly when the government doesn't even understand what they are trying to protect. It requires tedious, careful thought, intelligent legislation, and patience. That, unfortunately, seems to be lacking.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/56/10222#10222