Privacy
In the Privacy Impact Assessment (PIA) for Einstein 2 published in 2008, DHS gave a general notice to people who use U.S. federal networks. DHS assumes that Internet users do not expect privacy in the "To" and "From" addresses of their email or in the "IP addresses of the websites they visit" because their service providers use that information for routing. DHS also assumes that people have at least a basic understanding of how computers communicate and know the limits of their privacy rights when they choose to access federal networks. The Privacy Act of 1974 does not apply to Einstein 2 data because its system of records generally do not contain personal information and so are not indexed or queried by the names of individual persons. A PIA for the first version is also available from 2004.
DHS is seeking approval for an Einstein 2 retention schedule in which flow records, alerts, and specific network traffic related to an alert may be maintained for up to three years, and if, for example in the case of a false alert, data is deemed unrelated or potentially collected in error, it can be deleted.
According to the DHS privacy assessment for US-CERT's 24x7 Incident Handling and Response Center in 2007, US-CERT data is provided only to those authorized users who "need to know such data for business and security purposes" including security analysts, system administrators and certain DHS contractors. Incident data and contact information are never shared outside of US-CERT and contact information is not analyzed. To secure its data, US-CERT's center began a DHS certification and accreditation process in May 2006 and expected to complete it by the first quarter of fiscal year 2007. As of March 2007, the center had no retention schedule approved by the National Archives and Records Administration and until it does, has no "disposition schedule"—its "records must be considered permanent and nothing may be deleted".
Read more about this topic: Einstein (US-CERT Program)
Famous quotes containing the word privacy:
“The emphasis must be not on the right to abortion but on the right to privacy and reproductive control.”
—Ruth Bader Ginsberg (b. 1933)
“Isn’t privacy about keeping taboos in their place?”
—Kate Millet (b. 1934)
“A new father quickly learns that his child invariably comes to the bathroom at precisely the times when he’s in there, as if he needed company. The only way for this father to be certain of bathroom privacy is to shave at the gas station.”
—Bill Cosby (20th century)