Cybersecurity and Privacy - Revision history

Pinfold at 23:57, January 19, 2023

2023-01-19T23:57:51Z

← Older revision		Revision as of 16:57, January 19, 2023
Line 1:		Line 1:
	{{~~Sector~~		{{Book
	\| image = Cybersecurity and Privacy ~~200.jpg~~		\| image = CybersecurityChapter.jpg
	\| ~~blueprint~~ = ~~2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf~~		\| blueprint = Cybersecurity and Privacy
	\| ~~leader~~ = Scott Tousley, Lan Jenson		\| sectors = Cybersecurity and Privacy
	\| ~~Size~~ = ~~200~~		\| authors = Lan Jenson, David Balenson, Adnan Baykal, Gary Dennis, Wayne Dennis, Damon Kachur, Benny Lee, Carmen Marsh, Aleta Nye, Carmen Parada, Renil Paramel, Bill Pugh, Maryam Rahmani, Carter Schoenberg, Sushmita Senmajumdar, Deborah Shands, Dean Skidmore, Scott Tousley, Edward Walker, Ruwan Welaratna, Paul Wertz, Peter Wong
	\| ~~description~~ =		\| poc = Lan Jenson
	~~This set of {{#ask: [[Category:Activity]] [[Category:{{PAGENAME}}]]~~ \|~~format~~=~~count}} projects is managed~~ by the Cybersecurity and Privacy ~~Advisory Committee~~ (CPAC), a ~~public-private partnership dedicated~~ to ~~built-in~~ cybersecurity and privacy ~~best practices~~ and ~~considerations~~ in Smart ~~Secure~~ Cities and ~~Communities~~.		\| email = lan@cybertrustamerica.org
	~~\| body =~~		\| document = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
	Smart Secure Cities and Communities ~~unleash tremendous potential built~~ on the ~~power of data~~ and ~~technology~~. ~~With great power comes great responsibility. Well designed and executed~~, ~~municipalities~~ and ~~citizens will harvest marvelous benefits such~~ as ~~less traffic congestion~~, ~~faster emergency services~~, and ~~safer environments~~. ~~Inadequately designed and executed~~, ~~however~~, ~~municipalities~~ and citizens ~~may subject themselves to undesirable consequences such as loss~~ of ~~privacy~~, ~~data breaches~~, ~~financial loss~~ and ~~disruption~~ to ~~their work~~ and ~~even lives~~.		\| chapter = 200
			\| summary = This blueprint has been developed by the Cybersecurity and Privacy Action Cluster (CPAC) with the primary goal of providing a source document for all entities interested in learning how to manage upcoming Smart City cybersecurity and privacy challenges and risks.
			}}
			The National Institute of Standards and Technology (NIST) launched the [https://pages.nist.gov/GCTC/about/the-gctc/ Global City Teams Challenge (GCTC)] program in 2014 as a means to encourage collaboration across the global Smart Cities community. The goal of GCTC is to “establish and demonstrate replicable, scalable, and sustainable models for incubation and deployment of interoperable, standards-based solutions using advanced technologies such as IoT and CPS, and demonstrate their measurable benefits in communities and cities.”

			#In 2018, NIST and the Department of Homeland Security Science and Technology Directorate (DHS S&T) partnered to initiate the Smart and Secure Cities and Communities Challenge (SC3) as an effort to build on the GCTC program and demonstrate the “value and return on investment for designed-in trustworthiness for smart city deployments.”
			#In support of the SC3 effort, the Cybersecurity and Privacy Advisory Committee (CPAC) was established as a public working group comprised of cybersecurity and privacy professionals and practitioners across the GCTC community. The CPAC has representation from all levels of government, non-profit organizations, academia, and the private sector.

			The CPAC public working group is intended to provide a forum for members to
			share their expertise, leverage industry best practices, and further collaborate with
			relevant organizations. The CPAC also serves as a cybersecurity and privacy resource
			for the GCTC-SC3 SuperClusters and Action Clusters.
			;Purpose
			Advances in information and communication technologies (ICT) and the advent of
			Internet of Things (IoT) devices are enabling municipalities’ development and
			deployment of Smart City capabilities and solutions. Municipalities are leveraging
			these smart solutions to provide enhanced services to their citizens; improve the
			livability of their communities; and promote economic opportunity.

			Ubiquitous connectivity, the proliferation of computing power, and the emerging
			linkages between cyber and physical infrastructure introduce new and potentially
			greater cybersecurity and privacy risks than those found in the traditional IT
			enterprise. Effectively and proactively managing these emerging risks is critical to
			successfully developing and implementing solutions and to fully realize promised
			Smart City benefits.

	~~Formed in March 2018, CPAC consists of~~ cybersecurity and privacy ~~professionals~~ and ~~practitioners from governments, nonprofits and private businesses~~. ~~CPAC achieves its goal by 1) helping SuperClusters build cybersecurity and privacy best practices and~~ considerations ~~in their blueprints; 2) providing one-size-does-not-fit~~-~~all methodologies~~ to ~~enable SuperClusters~~ and ~~municipalities to comply with laws and standards pertinent to them~~. ~~To ensure timely~~, ~~tailored and consistent support~~, ~~CPAC embeds champions~~ in ~~SuperClusters' leadership teams~~ and ~~invite SuperClusters' leaders into CPAC leadership to guide its direction and priorities. Membership is open to all communities, private sector enterprises, non-governmental organizations~~, and ~~government agencies~~ (~~at all levels~~).		This Guidebook seeks to present an approach to Smart City cybersecurity and
	~~\| chair =~~		privacy risk management that can be adapted to meet the needs of individual
	~~<div><ul>~~		municipalities and communities. This Guidebook also provides some key
	~~<li style="display: inline-block;"> [[File:ScottTousley~~.~~jpg\|thumb\|none\|300px\|Scott Tousley, Deputy Director of S&T~~, ~~<br />Department of Homeland Security]] </li>~~		considerations that decision-makers will need to recognize and account for in their
	~~<li style="display: inline-block;"> [[File:LanJenson.jpg\|thumb\|none\|300px\|Lan Jenson~~, ~~CEO~~, ~~<br /> Adaptable Security Corp.]] </li>~~		risk management approach.
	~~</ul></div>~~
	~~\| team =~~		In addition, the appendices of this Guidebook provide additional resources, including
	~~<!--Department of Homeland Security~~, ~~[https://adaptablesecurity.org/ Adaptable Security Corp]~~, ~~[https://myevoz.com/ Evo Monitors]~~, ~~[https://www.ep3foundation.org/ EP3 Foundation]~~, ~~[https://www.globalcyberalliance~~.~~org/ Global Cyber Alliance]~~, ~~[https:~~/~~/sites~~.~~google.com/~~a~~/isc2-siliconvalley-chapter~~.~~org/orig/ ISC2 Silicon Valley Chapter]~~, ~~[https://www.smcgov.org/ San Mateo County]~~, ~~[https://www.sfbay.issa.org/ SF Bay ISSA]~~, ~~[https~~:~~//www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/~~ Smart ~~Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]-->~~		a set of use cases to help demonstrate the application of risk management concepts
	~~Department of Homeland Security, Cybertrust America, Evo Monitors, EP3 Foundation, Global Cyber Alliance, ISC2 Silicon Valley Chapter, San Mateo County, SF Bay ISSA, Sightlinesec,~~ Smart ~~Connections Consulting, The Sorter Group, SRI International~~		in real-world situations (see Appendix A) and the “CPAC ‘Top X’ Questions for a
	}}		Trustworthy Smart City,” a discussion tool for initiating the conversation around
			cybersecurity and privacy risk management (see Appendix C).
			;Intended Audience
			The primary audience for this guidebook is municipal policymakers and leaders (e.g.,
			mayors, council members, city managers, department heads, innovation officers,
			chief information officers, chief information security officers) actively involved in or
			considering the development of Smart City capabilities. However, it is also
			important for all other Smart City stakeholders (including technology/solution
			implementers and providers) to understand cybersecurity and privacy risk
			management processes and to be able to prepare and plan accordingly.
			;Key Takeaways
			Readers can take away best practices for a trustworthy Smart City from planning to
			design to implementation. Specifically, best practices include managing
			cybersecurity and privacy-related risks for smart solutions, IoT systems, as well as the
			existing information systems:
			*What is cybersecurity and privacy risk and why is risk management important?
			*How might cybersecurity and privacy risk management in a Smart City environment be different from a traditional IT environment?
			*How can cybersecurity and privacy risk management practices be operationalized and applied in the Smart City context?

Pinfold at 06:45, February 10, 2022

2022-02-10T06:45:45Z

← Older revision		Revision as of 23:45, February 9, 2022
Line 17:		Line 17:
	\| team =		\| team =
	<!--Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]-->		<!--Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]-->
	Department of Homeland Security, ~~Adaptable Security Corp~~, Evo Monitors, EP3 Foundation, Global Cyber Alliance, ISC2 Silicon Valley Chapter, San Mateo County, SF Bay ISSA, Sightlinesec, Smart Connections Consulting, The Sorter Group, SRI International		Department of Homeland Security, Cybertrust America, Evo Monitors, EP3 Foundation, Global Cyber Alliance, ISC2 Silicon Valley Chapter, San Mateo County, SF Bay ISSA, Sightlinesec, Smart Connections Consulting, The Sorter Group, SRI International
	}}		}}

Pinfold at 05:17, January 11, 2022

2022-01-11T05:17:34Z

← Older revision		Revision as of 22:17, January 10, 2022
Line 2:		Line 2:
	\| image = Cybersecurity and Privacy 200.jpg		\| image = Cybersecurity and Privacy 200.jpg
	\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf		\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
			\| leader = Scott Tousley, Lan Jenson
			\| Size = 200
	\| description =		\| description =
	This set of {{#ask: [[Category:Activity]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.		This set of {{#ask: [[Category:Activity]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.

Pinfold at 04:17, December 21, 2021

2021-12-21T04:17:11Z

← Older revision		Revision as of 21:17, December 20, 2021
Line 3:		Line 3:
	\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf		\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
	\| description =		\| description =
	This set of {{#ask: [[Category:~~Project~~]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.		This set of {{#ask: [[Category:Activity]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.
	\| body =		\| body =
	Smart Secure Cities and Communities unleash tremendous potential built on the power of data and technology. With great power comes great responsibility. Well designed and executed, municipalities and citizens will harvest marvelous benefits such as less traffic congestion, faster emergency services, and safer environments. Inadequately designed and executed, however, municipalities and citizens may subject themselves to undesirable consequences such as loss of privacy, data breaches, financial loss and disruption to their work and even lives.		Smart Secure Cities and Communities unleash tremendous potential built on the power of data and technology. With great power comes great responsibility. Well designed and executed, municipalities and citizens will harvest marvelous benefits such as less traffic congestion, faster emergency services, and safer environments. Inadequately designed and executed, however, municipalities and citizens may subject themselves to undesirable consequences such as loss of privacy, data breaches, financial loss and disruption to their work and even lives.

Pinfold at 07:15, December 6, 2021

2021-12-06T07:15:55Z

← Older revision		Revision as of 00:15, December 6, 2021
Line 1:		Line 1:
	{{Sector		{{Sector
	~~\| title = Cybersecurity and Privacy~~
	\| image = Cybersecurity and Privacy 200.jpg		\| image = Cybersecurity and Privacy 200.jpg
	~~\| imagecaption =Cybersecurity and Privacy~~
	\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf		\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
	\| description =		\| description =

Pinfold at 07:05, December 6, 2021

2021-12-06T07:05:23Z

← Older revision		Revision as of 00:05, December 6, 2021
Line 1:		Line 1:
	{{Sector		{{Sector
	\| title = Cybersecurity and Privacy ~~Advisory Committee (CPAC)~~		\| title = Cybersecurity and Privacy
	\| image = Cybersecurity and Privacy 200.jpg		\| image = Cybersecurity and Privacy 200.jpg
	\| imagecaption =Cybersecurity and Privacy		\| imagecaption =Cybersecurity and Privacy

Pinfold at 05:13, December 6, 2021

2021-12-06T05:13:47Z

← Older revision		Revision as of 22:13, December 5, 2021
Line 16:		Line 16:
	</ul></div>		</ul></div>
	\| team =		\| team =
	Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]		<!--Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]-->
			Department of Homeland Security, Adaptable Security Corp, Evo Monitors, EP3 Foundation, Global Cyber Alliance, ISC2 Silicon Valley Chapter, San Mateo County, SF Bay ISSA, Sightlinesec, Smart Connections Consulting, The Sorter Group, SRI International
	}}		}}

Pinfold at 05:10, December 6, 2021

2021-12-06T05:10:48Z

← Older revision		Revision as of 22:10, December 5, 2021
Line 3:		Line 3:
	\| image = Cybersecurity and Privacy 200.jpg		\| image = Cybersecurity and Privacy 200.jpg
	\| imagecaption =Cybersecurity and Privacy		\| imagecaption =Cybersecurity and Privacy
	\| blueprint = ~~[[media:~~2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf~~\|Cybersecurity and Privacy Blueprint]]~~		\| blueprint = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
	\| description =		\| description =
	This set of {{#ask: [[Category:Project]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.		This set of {{#ask: [[Category:Project]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.

Pinfold at 07:09, November 15, 2021

2021-11-15T07:09:05Z

← Older revision		Revision as of 00:09, November 15, 2021
Line 5:		Line 5:
	\| blueprint = [[media:2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf\|Cybersecurity and Privacy Blueprint]]		\| blueprint = [[media:2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf\|Cybersecurity and Privacy Blueprint]]
	\| description =		\| description =
	~~The~~ Cybersecurity and Privacy Advisory Committee (CPAC) is a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.		This set of {{#ask: [[Category:Project]] [[Category:{{PAGENAME}}]] \|format=count}} projects is managed by the Cybersecurity and Privacy Advisory Committee (CPAC), a public-private partnership dedicated to built-in cybersecurity and privacy best practices and considerations in Smart Secure Cities and Communities.
	\| body =		\| body =
	Smart Secure Cities and Communities unleash tremendous potential built on the power of data and technology. With great power comes great responsibility. Well designed and executed, municipalities and citizens will harvest marvelous benefits such as less traffic congestion, faster emergency services, and safer environments. Inadequately designed and executed, however, municipalities and citizens may subject themselves to undesirable consequences such as loss of privacy, data breaches, financial loss and disruption to their work and even lives.		Smart Secure Cities and Communities unleash tremendous potential built on the power of data and technology. With great power comes great responsibility. Well designed and executed, municipalities and citizens will harvest marvelous benefits such as less traffic congestion, faster emergency services, and safer environments. Inadequately designed and executed, however, municipalities and citizens may subject themselves to undesirable consequences such as loss of privacy, data breaches, financial loss and disruption to their work and even lives.

Pinfold at 19:34, November 12, 2021

2021-11-12T19:34:09Z

← Older revision		Revision as of 12:34, November 12, 2021
Line 18:		Line 18:
	Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]		Department of Homeland Security, [https://adaptablesecurity.org/ Adaptable Security Corp], [https://myevoz.com/ Evo Monitors], [https://www.ep3foundation.org/ EP3 Foundation], [https://www.globalcyberalliance.org/ Global Cyber Alliance], [https://sites.google.com/a/isc2-siliconvalley-chapter.org/orig/ ISC2 Silicon Valley Chapter], [https://www.smcgov.org/ San Mateo County], [https://www.sfbay.issa.org/ SF Bay ISSA], [https://www.sightlinesec.com/ Sightlinesec], [https://www.facebook.com/ConnectThatCity/ Smart Connections Consulting], [https://www.thesotergroup.com/ The Sorter Group], [https://www.sri.com/ SRI International]

	~~\| sector = Cybersecurity and Privacy~~
	}}

	~~{{#ask:~~
	~~[[Category:Project]]~~
	~~[[Category:Cybersecurity and Privacy]]~~
	~~\|?=~~
	~~\|?Has image#=2~~
	~~\|?Has description#=3~~
	~~\|format=plainlist~~
	~~\|named args=yes~~
	~~\|introtemplate=Show image Header~~
	~~\|template=Show image~~
	~~\|outrotemplate=Show link Footer~~
	}}		}}