Cybersecurity: Panel calls on Obama to secure America’s computer networks

After a year-long investigation, a blue-ribbon panel has issued a report that finds the security of U.S. computer networks to be sorely lacking, and urges the incoming Obama administration to take sweeping actions to shore up America's cyber-defenses.

Released today by the non-partisan Commission on Cyber Security for the 44th Presidency, the report offers these key findings:

• The country faces long-term economic and national security challenges from foreign intelligence agencies and militaries, criminals, and others.


• Poorly protected U.S. computer networks have already suffered serious damage at the hands of foreign intruders. For example, last year, the Departments of Defense, State, Homeland Security, and Commerce, as well as NASA and the National Defense University, all suffered major intrusions by unknown foreign entities. There's also evidence that U.S. companies have lost billions of dollars in intellectual property.


• Efforts to protect American computer networks have been hampered by outdated laws , inadequate regulation, and the antiquated structure of the Federal government.


• In the wake of rapidly changing threats, policymakers have been indecisive in devising a cybersecurity strategy and implementing it, choosing instead to pass the buck to the government's technology specialists.


• Cybersecurity has become a national security issue on par with weapons of mass destruction and global jihad, and it shouldn't be handed off to the private sector and the market.

These are among the report's recommendations for the incoming administration:

• Increase the regulation of cyberspace without stifling innovation.


• Modernize cyberspace laws to speed investigations and better protect privacy.


• Use the government's purchasing power to promote the use of more secure technologies.


• Create a White House National Office for Cyberspace to partner with the National Security Council to develop a comprehensive national security strategy for cyberspace and to subsequently oversee its execution by Federal agencies.

While the report focuses mostly on issue with government and industry, it also addresses the security of online consumers. Specifically, it recommends consumers be allowed to use identifying credentials (issued by either government or business) for online activities that are stronger than the ones they currently use. Yet it specifies that these be consistent with protecting privacy and civil liberties. That's a similar approach to the one Homeland Security chief Michael Chertoff suggested when we met with him in October.

As officials and experts have told us for years, consumers can also do their part to secure cyberspace by protecting their home computers and following good online safety practices. For free advice on how to protect yourself online, see our comprehensive Online Security Guide. For the best products to protect your computer, see our Ratings of security software suites (available to subscribers).

—Jeff Fox