USACM considers Privacy and Security to be interlinked. The idea that one must give up privacy for security or vice versa ignores how good privacy practices can help establish good security, and how good security can help protect privacy.  The rash of data breaches over the last several years represents failures in protecting both privacy and security. 

Preserving privacy and security is more than implementing best practices.  From the design of systems through their implementation and operation it is critical to keep both security and privacy in mind.  Any personal data used in a large computing system needs to be stored, collected and managed appropriately throughout its use.  Computing security involves not just protection against anticipated threats, but monitoring for possible threats (from within and without), physical protection, access controls, and both individual and corporate accountability for security and its failure

Related Documents

Related Articles

USPTO and NIST To Host Multistakeholder Meeting on Cybersecurity and Patents in Silicon Valley on November 14
The U.S. Patent and Trademark Office (USPTO), in partnership with the National Institute of Standards and Technology (NIST), will host the first multistakeholder Cybersecurity Partnership Meeting on November 14 in Menlo Park, California. The public meeting will focus on the inter ...Read More

  • (Posted on 24-Oct-14)
  • USACM Submits Comments On National Privacy Research Strategy
    On October 17, comments closed on a Request for Information from the Networking and Information Technology Research and Development (NITRD) program.  Agencies in this program are working on a National Privacy Research Strategy, and sought input from the public.  Specifically, the ...Read More

  • (Posted on 21-Oct-14)
  • USACM Focuses On Roadmap In Cybersecurity Framework Comments
    As part of its work on the Cybersecurity Framework (Framework), the National Institute of Standards and Technology (NIST) sought comments from stakeholders on their experiences with it.  USACM has followed the development of the Framework since the 2013 Executive Order that requi ...Read More

  • (Posted on 15-Oct-14)
  • NITRD Agencies To Develop National Privacy Research Strategy
    The White House Office of Science and Technology Policy has asked a steering group in the Federal Networking and Information Technology Research and Development (NITRD) Program to lead development of a National Privacy Research Strategy.  As part of this effort, there is a Reques ...Read More

  • (Posted on 30-Sep-14)
  • NIST Will Present Draft Privacy Engineering Objectives
    On Thursday, October 2, the National Institute of Standards and Technology (NIST) has a webcast scheduled to present its draft (including a discussion deck) Privacy Engineering Objectives and Risk Model.  The development of these materials has been informed by two Privacy Enginee ...Read More

  • (Posted on 29-Sep-14)
  • The Food And Drug Administration Seeks Input On Medical Device Security
    The Food and Drug Administration (FDA) has announced a workshop on medical device cybersecurity for October 21 and 22 in Arlington, Virginia.  Titled “Collaborative Approaches for Medical Device and Health Care Cybersecurity,” the event is intended for a broad audienc ...Read More

  • (Posted on 28-Sep-14)