iCERT Fraser Cloud Presentation - The Industry Council · PDF fileiCERT Fraser Cloud...

Post on 26-Mar-2018

214 views 2 download

Transcript of iCERT Fraser Cloud Presentation - The Industry Council · PDF fileiCERT Fraser Cloud...

Barry  Fraser  Bio  •  2012-­‐Present  -­‐  General  Manager,  San  Francisco  Bay  Area  Interoperable  Regional  

CommunicaAons  Systems  Authority  (BayRICS)  •  2007-­‐2012  -­‐  City  and  County  of  San  Francisco  Department  of  Emergency  Management  and  

Department  of  Technology  from  2007-­‐2012  •  1998-­‐2007  County  of  San  Diego        •  MA  Degree,  Radio  and  Television,  San  Diego  State  University;    JD  Degree,  University  of  San  

Diego  School  Of  Law.  •   AcAvely  parAcipates  on:  

–  NaAonal  Public  Safety  TelecommunicaAons  Council  (NPSTC),  including  NPSTC’s  Local  Control  and  Quality  of  Service  work  groups.      

–  Chair,  Public  Safety  Technology  CommiZee,  NaAonal  AssociaAon  of  TelecommunicaAons  Officers  and  Advisors  (NATOA),    

–  Represents  NATOA  on  the  FirstNet  Public  Safety  Advisory  CommiZee  (PSAC).      –  Serves  on  the  California  First  Responder  Network  Authority  (CalFRN)  Board  of  Directors.  

•  Engaged  with  State  and  Federal  stakeholders  to  plan  for  FirstNet  naAonwide  public  safety  broadband  network  in  the  Bay  Area  and  California  

Access  to  Public  Safety  Networks    •  Yesterday:      •  Today:  

•  Tomorrow:    ?  

“SCANNER  RADIO”  MOBILE  APP  

BROADCASTIFY.COM  

Access  to  “Records”  •  AcAviAes  Occurring  in  Open  Public  •  Public  Records  Request  •  Human  Error  •  IntenAonal  Data  Thea  

Freedom  of  InformaAon  Act/California  Public  Records  Act  

•  Governmental  records  shall  be  disclosed  to  the  public,  upon  request,  unless  there  is  an  excepAon.  

•  ExcepAons:  –  Privacy  –  ConfidenAality  –  Security  –  Public  Interest:  “If  the  public  interest  served  by  not  making  the  record  

public  clearly  outweighs  the  public  interest  served  by  disclosure  of  the  record.”  •  Some  jurisdicAons  have  enacted  Sunshine  Laws  that  eliminate  this  excepAon.  

Public  InformaAon  in  a  Shared  Network  Environment  

•  Who  “owns”  the  data?  – Who  has  access?  – Where  is  it  stored?  – Which  laws  apply?  

•  Is  the  data  kept  in  the  regular  course  of  business?  – What  communicaAons  must/should  be  saved?  –  Can  the  record  be  idenAfied  and  provided  in  a  useful  format?  

–  Can  the  record  be  reviewed  and  redacted  if  necessary?  

Public  InformaAon  in  a  Shared  Network  Environment  

•  Specific  Types  of  Records:  –  Public  safety  text  and  digital  voice/video  communicaAons  (encrypted?    stored?)?  

–  PaAent  medical  records?  –  Personally  idenAfiable  informaAon?  –  Photos  &  video  images?  –  Law  enforcement  records?  –  9-­‐1-­‐1  CommunicaAons?  –  OperaAonal,  technical  &  infrastructure  data  that  may  pose  a  security  risk?