FCC might certify telecommunication firms' cybersecurity practices

The Federal Communications Commission took firsts steps May 11 toward establishing voluntary cybersecurity certification for private sector communication firms by releasing a proposed rule in the Federal Register.

The certification could address four areas, the notices states:

• Secure equipment management;
• Updating software;
• Intrusion prevention and detection; and
• intrusion analysis and response.

The commission's National Broadband Plan first made mention of the voluntary certification program; according to the register notice, either the FCC or an independent third party would certify companies, should the effort go forward.

Which firms could participate in the voluntary certification program is a question the notices request feedback on. The broader the scope of private sector participation, the less meaningful certification could be, the notice states.

"Would restricting the applicants to Internet Service Providers permit a more focused, meaningful set of certification criteria? Should the Commission develop multiple sets of sector-specific certification criteria?" the notice asks.

The objective of certification is to provide business incentives for good cybersecurity, the notice adds. The motive behind it increasing cyber attacks coupled with decreased cybersecurity spending and increased society-wide reliance on the Internet, the FCC states.

"All levels of government, from the national to the local level, similarly depend on our communications networks to provide services, serve the public, collect information and maintain security. Such services require the instantaneous, secure movement of vast amounts of data," the notice states.

Initial comments are due by July 12 and replies are due by Sept. 8. Commenters can submit responses through the FCC electronic comment filing system or through Regulations.gov; the proposed rule is identified either as PS Docket No. 10-93 or rulemaking FCC 10-63.

For more:
- read the Federal Register notice

Related Articles:
Epic battle shapes up over broadband reclassification
FCC unveils plan for public safety network