DHS seeks to expand information-sharing program

Involving more agencies would facilitate faster exchanges of knowledge about cyber-threats and attacks, official says.

The Homeland Security Department would like to extend an information networking program to more Cabinet-level agencies, a DHS telecommunications official said Thursday.

Bruce Landis, deputy assistant secretary for cybersecurity and telecommunications at DHS, told attendees of the 2007 Maryland Cybersecurity Forum in College Park, Md., that officials may broaden the department's EINSTEIN program in an effort to include more key agencies. The program tracks cyber-threats and attacks using an automated system that gathers, analyzes and re-distributes computer security information across the federal government.

Landis said eight agencies are currently involved, but he did not say which ones. He said the expansion of EINSTEIN would "speed up our sharing of information."

Prior to EINSTEIN's establishment in 2004, the federal government lacked automated information sharing processes to defend against cyber-attacks, often leaving officials to determine how and where weaknesses occurred after the fact, a review of the program stated. The assessment, conducted by DHS officials in 2004 said "experience with recent cyber attacks has demonstrated effective defenses require accelerated information sharing, analysis and enhanced response preparation."

While pushing for the program's expansion, Landis also said that the department's cybersecurity, telecommunications and science and technology sections are trying to help local first responders obtain compatible communications equipment. Landis said this includes upgrading radio systems where needed and expanding oversight.

"The department's already done a lot of work" on beefing up oversight, Landis said. DHS and the Commerce Department will distribute $1 billion in grants across the country for varying purchases and exercises to improve interoperability.

Still, DHS has limits on the oversight that can be imposed, Landis said when asked how interoperability grants could be regulated without infringing on states' rights.

"We don't have the authority to say [to states], 'This is what you're going to do,'" Landis said.

Landis also voiced concerns about staffing levels, saying that the part of DHS he serves has had a "hard time finding the right people" to fill job openings.