CIO Council drops out of controversial cybersecurity forum

Group moves to start up its own information exchange effort.

The group's advisory board, unveiled last week, included six top agency cybersecurity executives and two technology companies paying a $75,000 membership fee. The group was scheduled to meet quarterly and write an annual report on government cybersecurity issues. The advisory board would direct the writing the report and determine what other companies could join the organization at two lower levels of involvement, costing $25,000 and $5,000.

The federal Chief Information Officers Council formally withdrew its support Thursday for the Chief Information Security Officers Exchange, a controversial public-private forum that drew criticism for its model of charging technology firms to participate in policy-related discussions with federal officials.

The council, made up of top technology officials at federal agencies, recommended that its own Best Practices Committee address methods of improving agencies' cybersecurity efforts.

"The CIO Council looks forward to establishing a chief information security officer exchange that is open and accessible to all members of the information technology community in both the government and the private sector," said Daniel P. Matthews, vice chair of the council and the Transportation Department's chief information officer.

Karen Evans, the Office of Management and Budget's administrator for electronic government and director of the CIO Council, said she accepted the council's recommendation to withdraw from the group.

The CISO Exchange was organized and managed by O'Keeffe and Co., an Alexandria, Va.-based marketing and public relations firm. It was to be chaired by a top federal cybersecurity official and the House Government Reform Committee's staff director.

Steve O'Keeffe, president of O'Keeffe and Co., said he was pleased that the CIO Council recognized the importance of focusing on information security in the federal government and that his company will support the council's initiatives.

Earlier this week, one of CISO Exchange's industry partners, Computer Sciences Corp., withdrew from the group because of concerns about the business model for the organization.

On Thursday, the group's second industry partner, Herndon, Va.-based NetSec, also withdrew.

"NetSec is disappointed that the CISO Exchange didn't come to fruition," spokesman Evan Weisel said. "The idea and the intention of it was good."