Title: Information Technology
Course: 2016FA-MCO-115-401 > Section: Module 6: Information Technology

Click here for a downloadable version of this document: Information Technology

Information Technology

Information Technology is, “the technology involving the development, maintenance, and use of computer systems, software, and networks for the processing and distribution of data” [1].

Critical Infrastructure Sector

The Information Technology Sector includes assets held both privately and publicly with virtual and distributed functions that produce and provide hardware, software, and services. It has a built-in resilience with some redundancies however, it is quite challenging to protect. “The sector’s complex and dynamic environment makes identifying threats and assessing vulnerabilities difficult and requires that these tasks be addressed in a collaborative and creative fashion” [2]. Having the Internet included makes this one of the most challenging sectors to protect.

Collaboration of those in this sector make it possible to promote cyber preparedness, response, and recovery. Sector members have developed a national-level plan to avoid, mitigate, tolerate, or transfer risks to IT infrastructure and they work to continually provide leadership in cybersecurity as well as offer help in response to threats [3].

Why is Information Technology Critical Infrastructure?

Information Technology is used by individuals in their private life, healthcare, education, business, and government. The Information Technology Sector is interdependent with the Communications Sector, sharing some methods of delivery and architecture as well as some security concerns while the Communications Sector can rely on the Internet (a large portion of the Information Technology Sector) as a means for communication.

The Department of Homeland Security describes the Information Technology Sector as, “…central to the nation’s security, economy, and public health and safety” [2].

Regulation

The Sector Specific Agency (SSA) for the Information Technology Sector is the Department of Homeland Security (DHS). DHS was directed to work with state and local governments to establish strong IT security programs in the 2002 National Strategy to Secure Cyberspace [3].

Since end users of the Internet can purchase their service from providers that use wire, satellite, and radio technologies, the Federal Communications Commission (FCC) would be a regulating body over them [4].

The Office of Cybersecurity and Communications (CS&C) is responsible for, “… assuring the security, resiliency, and reliability of the nation’s cyber and communications infrastructure”, and is therefore a regulator of Information Technology [5].

Threats

One of the biggest threats to the Information Technology Infrastructure Sector is cyber-crime. Wikipedia says that “computer crime, or cyber-crime, refers to any crime that involves a computer and a network“ [6]. “The McAfee security firm estimated that cybercrime and cyber-espionage are costing the US economy $100 billion per year, and the global impact is nearly $300 billion annually” [7].

Careful practices and anti-malware software can be helpful in defending against malware. The simple steps of installing a firewall, installing anti-spyware software, and installing anti-virus software will go a long way to protecting data, hardware, and identity.

Cybersecurity

Cybersecurity is defined by Merriam-Webster as, “the measures taken to protect a computer system (as on the Internet) against unauthorized access or attack” [8].

Cybersecurity is a big part of the Information Technology Infrastructure Sector and is also a big part of our daily lives. With all the things that Information Technology is used for today, it should come as no surprise that we rely on it for banking, commerce, communications, travel, energy, medical, and government uses. Each of these is at risk from cyber-crime. Also, not surprisingly, practically every new technology, technology upgrade, and new software brings with it new opportunities for cyber-crime.

President Obama signed Executive Order 13636 on Tuesday, February 12, 2013. This Executive Order describes the importance of protecting the Nation’s critical infrastructure cybersecurity, describes how agencies will work together to improve cybersecurity, calls for the National Institute of Standards and Technology (NIST) to create the Cybersecurity Framework (standards, guidelines, procedures, and best practices designed to help the owners of critical infrastructure address cyber risks), and provides instructions on how the Framework is to be implemented.

The Department of Homeland Security helps to educate the public about online safety, investigates and arrests cyber criminals, and warns the United States of potential threats in the form of actionable cyber alerts [2]. For more information on the work of the DHS, please see the following links:

The Department of Homeland Security Cybersecurity Overview http://www.dhs.gov/cybersecurity-overview

The Department of Homeland Security Shaping the Future of Cybersecurity Education and Workforce Development

http://www.dhs.gov/shaping-future-cybersecurity-education-and-workforce-development