Can we ensure that Open Data is useful AND secure?
Paper #1: Can we ensure that Open Data is useful AND secure?
Scenario:
A federal agency has asked your cyber security consulting firm to provide it with a white paper that discusses the issues of usefulness and security in regards to Open Data. The white paper is intended for a group of executives at the agency who are opposed to the planned conversion of its current controlled distribution for several highly valuable and frequently requested data sets (DVDs purchased through the Government Printing Office) to OPEN Data distribution via the governments Data.Gov portal (website). Currently, these data sets are purchased by businesses and academic institutions and are used for a variety of purposes.
A customer satisfaction survey revealed that purchasers are willing to change over to the new Open Data distribution method for data sets. But, the agency head has received phone calls from several large and politically well-connected customers who expressed concerns about potential issues with the integrity and authenticity of downloaded data. The agencys executives were also surveyed and they provided the following security-related items in a list of concerns for the planned conversion to an Open Data delivery method:
a.Confidentiality / Privacy (ensuring proper redaction)
b.Data integrity
c.Data authenticity
d.Availability (reliability) of the Open Data service (website)
e.Non-repudiation of data sets
