Bruce Schneier on the so-called ‘National Strategy to Secure Cyberspace’
As usual, Bruce is right on the button. “For some reason, Richard Clarke continues to believe that he can increase cybersecurity in this country by asking nicely. This government has tried this sort of thing again and again, and it never works. This National Strategy document isn’t law, and it doesn’t contain any mandates to government agencies. It has lots of recommendations. It has all sorts of processes. It has yet another list of suggested best practices. It’s simply another document in my increasingly tall pile of recommendations to make everything better. (The Clinton Administration had theirs, the “National Plan for Information Systems Protection.” And both the GAO and the OMB have published cyber-strategy documents.) But plans, no matter how detailed and how accurate they are, don’t secure anything; action does.” Amen.