Risk News

6/18/2013
More Data on Privacy, but Picture Is No Clearer

"Technology companies, the custodians of reams of personal data from hundreds of millions of people around the world, have been under fire after recent revelations that they secretly handed over customer information, including e-mails, in response to requests by the federal government made in the name of national security."

Annie's take:

It's hard to let this topic go. There's testimony going on right now in front of the Senate Intelligence Committee. The big question is whether this level of disclosure on the program will change anything.

6/17/2013
Every Wall Is A Door

"I started teaching about operational risk at the University of Washington's Information School a little more than a year ago."

Annie's take:

I write four times a year for the London-based digital magazine, The Risk Universe. Here's my latest contribution which describes some of the joys of teaching and what I hope to accomplish.

6/16/2013
Metadata reveals the secrets of social position, company hierarchy, terrorist cells

"The general’s mistress thought she was being clever by using anonymous e-mail accounts and sending messages using hotel WiFi networks. But metadata — in this case the Internet protocol addresses pointing to network locations — gave her away."

Annie's take:

A clear explanation of metadata, and how it is used to gain information about Internet users. See also the timeline connected to the article that lays out a kind of history of surveillance.

6/15/2013
Facebook Discloses Basic Data on Law-Enforcement Requests

"Facebook on Friday disclosed for the first time how many requests for data about its 1.1 billion users it had gotten from law enforcement authorities in the United States."

Annie's take:

Is this a lot of requests, or what?

6/14/2013
A Promise of Changes for Access to Secrets

"The chairwoman of the Senate Intelligence Committee emerged from a classified briefing on Thursday about the leak of top secret surveillance programs and declared that Congress would soon consider legislation to sharply limit the access that private contractors — who operate much of the national security infrastructure — have to the nation’s most sensitive intelligence programs."

Annie's take:

Limiting contractor access when contractors have developed the programs that are running will be a real challenge. I believe that so many contractors were hired after 9/11 because the government hiring process would have taken too long, and it was not clear what the government would need to hire for. Perhaps by now that has changed, though I expect little will change overall in the relationships between firms like Booz Allen and NSA, NIS and DHS.

6/13/2013
N.S.A. Chief Says Phone Logs Halted Terror Threats

"The director of the National Security Agency told Congress on Wednesday that “dozens” of terrorism threats had been halted by the agency’s huge database of the logs of nearly every domestic phone call made by Americans, while a senator briefed on the program disclosed that the telephone records are destroyed after five years."

Annie's take:

In light of the Pew survey released yesterday, which indicates most Americans are comfortable with this level of surveillance because they have nothing to hide, Alexander's comments will probably pass unnoticed. But certainly one effect of the leaks is to bring into the light the depth and breadth of these programs.

6/12/2013
3 Tech Giants Want to Reveal Data Requests

"Google, Facebook and Microsoft on Tuesday asked the government for permission to reveal details about the classified requests they receive for the personal information of foreign users."

Annie's take:

It will be interesting to see how this plays out. Will the government give these private sector technology companies permission to say more? What would the implications of that permission be relative to prosecution of the leaker? I am beginning to think that these issues are too complex for most Americans to understand at all.

6/12/2013
Edward Snowden, Bradley Manning and the risk of the low-level, tech-savvy leaker

"In the span of three years, the United States has developed two gaping holes in its national security hull, punctures caused by leakers who worked at the lowest levels of the nation’s intelligence ranks but gained access to large caches of classified material."

Annie's take:

This article, with its profile of both Snowden and Manning, does make you wonder if people without college degrees should have access to such sensitive materials. Would learning to look at the world through a series of college course requirements designed to exapand one's thinking and understanding of the world, have made a difference?

6/11/2013
Debate on Secret Data Looks Unlikely, Partly Due to Secrecy

"Edward J. Snowden said he had leaked secret documents about National Security Agency surveillance to spark a public debate about civil liberties. President Obama, while deploring the leak, endorsed the same goal of a vigorous public discussion of the “trade-offs” between national security and personal privacy."

Annie's take:

It would be unfortunate if what could be a national discussion devolved only into wrangling among members of Congress. Yet we are now so vast a group of citizens that it is difficult to know how such debates might take place. Ideas anyone?

6/10/2013
In the Name of Public Safety, Part II

"New York University hosted its annual Global Risk Forum last week, with presentations from experts on critical infrastructure protection, hacktivism from groups like Anonymous, and bio-threats like the MERS coronavirus; and a general discussion by participants of top risks on the radar screen. "

Annie's take:

Here's my latest column in this month's issue of ASA News & Notes, along with three new research notes. The first, by Devin Luco, looks at risks of mobile banking; the next, by Chitra Raman, looks at risk exposures at the U.S. Department of Veterans Affairs; and the third, by Del Hazely, looks at the digital divide on the continent of Africa.

6/9/2013
U.S., company officials: Internet surveillance does not indiscriminately mine data

"The director of national intelligence on Saturday stepped up his public defense of a top-secret government data surveillance program as technology companies began privately explaining the mechanics of its use."

Annie's take:

This article includes a sidebar with excerpts from the PRISM powerpoint document.

6/8/2013
Administration Says Mining of Data Is Crucial to Fight Terror

"In early September 2009, an e-mail passed through an Internet address in Peshawar, Pakistan, that was being monitored by the vast computers controlled by American intelligence analysts."

Annie's take:

Here's an encapsulated version of both sides of the argument on security vs. privacy. We have all known that data mining and other digital tools are utilized in the war on terrorism. We elect officials in this country to protect our interests, for both the legislative and executive branches of government. The judicial side is a bit more complicated, but at the highest level judicial candidates are recommended by the executive and voted on by the legislative branch. That's our form of government: even where there is no transparency for extended periods of time, usually what is secret is revealed. Now we'll have a larger discussion on whether the Patriot Act should be re-architected.

6/7/2013
U.S. Confirms That It Gathers Online Data Overseas

"The federal government has been secretly collecting information on foreigners overseas for nearly six years from the nation’s largest Internet companies like Google, Facebook and, most recently, Apple, in search of national security threats, the director of national intelligence confirmed Thursday night."

Annie's take:

Though more details will most likely continue to emerge, this story only confirms what many of us have suspected for some time: that the government's security program runs mostly on digital pattern recognition on a broad scale. It is hard to know how President Obama will handle the China delegation on matters of cyber intrusions in light of the revelation that the U.S. government's intrusions reach into other countries around the world.

6/6/2013
U.S. Is Secretly Collecting Records of Verizon Calls

"The Obama administration is secretly carrying out a domestic surveillance program under which it is collecting business communications records involving Americans under a hotly debated section of the Patriot Act, according to a highly classified court order disclosed on Wednesday night."

Annie's take:

ASA News & Notes ran a research note several months ago on FISA and the courts used to obtain such secret warrants, which you may wish to re-read in light of this article. If you are a Verizon smartphone user, you are undoubtedly shaken by this turnover of your phone log records to the federal government. Clearly a broader discussion of how these government powers, now part of the Patriot Act, actually work is in order.

6/5/2013
One of Wall Street's Riskiest Bets Returns

"Investors are once again clamoring for a risky investment blamed for helping unleash the financial crisis: the synthetic CDO."

Annie's take:

Bankers and banks are resilient types...and look what's back, or at least what is considered. The synthetic CDO is one of the least understood financial instruments but a certain contributor to the financial crisis that we are only now starting to recover from. I suppose that's what this option is back.

6/4/2013
Justices Allow DNA Collection After an Arrest

"The police may take DNA samples from people arrested in connection with serious crimes, the Supreme Court ruled on Monday in a 5-to-4 decision."

Annie's take:

There is no doubt that this will be one of the most controversial decisions that the Supreme Court has made. And technology has made it possible.

6/3/2013
Risk-Averse Culture Infects U.S. Workers, Entrepreneurs

"Americans have long taken pride in their willingness to bet it all on a dream. But that risk-taking spirit appears to be fading."

Annie's take:

We saw starting in 2007 how taking too much risk can cause major economic impacts. Here's the flip side: taking too little risk causes another set of problems that might be summarized in the term "stagnation."

6/2/2013
Eco-sensitivity can be just plain good business

"The big idea: Tracking cost savings, top-line growth, brand enhancement and systems innovations inspired by a sustainable business orientation underscores the importance of collaborative solutions."

Annie's take:

Sustainability exceeds the parameters of operational risk, which is why we don't cover it or its sibling, climate change, that often. Here, though, is a story we can all be proud of, particularly those of us who live in Seattle.

6/1/2013
The dark side of globalization

"I am often asked what keeps me awake at night after nearly 40 years as a Navy officer, including four years as supreme allied commander for global operations at NATO."

Annie's take:

A thought-provoking editorial, not for the faint-of-heart.