Louis Lingg writes: "The United States General Accounting Office has posted the testimony given by Robert F. Dacey,
Director of Information Security Issues, GAO, to the U.S. House of Representatives' Subcommittee on Oversight and Investigations, Committee on Energy and Commerce:

'Critical Infrastructure Protection: Significant Homeland Security
Challenges Need to Be Addressed'

An excerpt: As proposed, the functions of the Information Analysis and
Infrastructure Protection division would include receiving and
analyzing law enforcement and intelligence information, assessing
cyber and physical vulnerabilities of critical infrastructures, and
taking measures to protect them.

The consolidation of these six organizations into a single division,
if properly implemented, could result in combining similar functions,
thereby avoiding duplication and possibly creating more robust
capabilities. For example, analysis and warning of cyber incidents is
currently performed by both the National Infrastructure Protection
Center and the Federal Computer Incident Response Center. However,
prior GAO work has identified and made recommendations concerning
several critical infrastructure protection challenges that need to be
addressed, which would face the new department. Specifically, they
are:

* Developing a national critical infrastructure protection strategy.

* Improving analytical and warning capabilities.

* Improving information sharing.

* Addressing pervasive weaknesses in federal information security.