A federal agency has asked your cybersecurity consulting firm to provide it with a white paper that discusses the issues of usefulness and security in regards to Open Data. The white paper is intended for a group of executives at the agency who are opposed to the planned conversion of its current controlled distribution for several highly valuable and frequently requested datasets (DVDs purchased through the Government Printing Office) to OPEN Data distribution via the government’s Data.Gov portal (website). Currently, these data sets are purchased by businesses and academic institutions and are used for a variety of purposes.
A customer satisfaction survey revealed that purchasers are willing to change over to the new Open Data distribution method for data sets. But, the agency head has received phone calls from several large and politically well-connected customers who expressed concerns about potential issues with the integrity and authenticity of downloaded data. The agency’s executives were also surveyed and they provided the following security-related items in a list of concerns for the planned conversion to an Open Data delivery method:
a. Confidentiality / Privacy (ensuring proper redaction)
b. Data integrity
c. Data authenticity
d. Availability (reliability) of the Open Data service (website)
e. Non-repudiation of data sets
Research:
1. Read / Review the weekly readings.
2. Research the federal government’s OPEN Data mandate. Here are some sources that you may find useful:
a. https://www.whitehouse.gov/sites/default/files/omb/memoranda/2013/m-13-13.pdf (includes significant discussion of security issues and policy solutions including references to FIPS 199 and NIST SP-800-53)
b. https://www.whitehouse.gov/sites/default/files/microsites/ostp/us_open_data_action_plan.pdf
c. http://www.data.gov
d. http://www.data.gov/data-policy
e. https://www.whitehouse.gov/sites/default/files/omb/memoranda/2014/m-14-06.pdf
f.
3. Research how government information, e.g. OPEN Data, is used by businesses and the general public. Here are some sources to get you started:
a. 7 Ways Companies Are Using the Government's Open Data http://mashable.com/2013/05/30/7-ways-government-open-data/