素包子

一个资产要有分级，一个安全事件要有分级，企业整体风险也要有分级；通过分级可以很清晰得出定性的东西，但是分级这事情水还是挺深的。今天在赵粮的blog看到美国国土安全局的分级方法，转过来。

The often-spoofed, color-coded Homeland Security Advisory System may get an overhaul – moving from five colors to three in a bid to win the public trust.

The nation has been at Yellow, “an elevated significant risk of terrorist attacks” for three years. International and domestic flights have been at an Orange “high risk of terrorist attacks” for the same period.

A proposal by the Homeland Security Advisory Council, unveiled late Tuesday, recommends removing two of the five colors, with a standard state of affairs being a “guarded” Yellow. The Green “low risk of terrorist attacks” might get removed altogether, meaning stay prepared for your morning subway commute to turn deadly at any moment.

The Threat Level advisory system was set up in 2002 in the wake of the 2001 terror attacks and has changed 17 times — the last in 2006. It has never been lowered to Green “low risk of terrorist attacks” or the Blue “general risk of terrorist attacks.”

“There is currently indifference to the public Homeland Security Advisory System and, at worst, there is a disturbing lack of public confidence in the system,” the council wrote Janet Napolitano, the Homeland Security secretary.

The 19-member panel’s recommendations are not binding. Panel membership ranges from Miami Mayor Manny Diaz to Joe Shirley, president of the Navajo Nation. Some members supported scrapping the color-coded system.

But the group said the public should feel confident in a new three-color rating system because, “for reasons of public credibility,” the scale won’t be politicized and instead the government “should elevate the threat status only when compelled to do so in the interest of public safety and security.”

That statement comes two weeks after Tom Ridge, the former Homeland Security secretary, wrote in a new book, the Test of Our Times, that former Defense Secretary Donald Rumsfeld and former Attorney General John Ashcroft unsuccessfully lobbied him to raise the threat level days before the 2004 elections, in a bid to seal President George W. Bush’s re-election.

“Ashcroft strongly urged an increase in the threat level, and was supported by Rumsfeld,” Ridge writes. “There was absolutely no support for that position within our department. None. I wondered, ‘Is this about security or politics?’”

The new system, if approved by the agency, would consist solely of Yellow, Orange and Red.

Here are the new meanings:

Don’t forget to stock up on duct tape.

包子猜您可能还喜欢下列文章：

1. Threat Modeling
2. Cyber attack could bring U.S. military response
3. Using Threat Models
4. SDL Threat Modeling
5. Windows Vista ISV Security和Getting Started With The SDL Threat Modeling Tool