ABSTRACT

This chapter addresses the history, current state, and likely future evolution of information security policy in the national context. The first section surveys events over the past forty years that had significant consequences for the development of information security policies. The second section evaluates the current state of information security policy in the United States. The third section examines gaps between what an effective information security program in a national context might require and what is available now, with some suggestions as to future areas requiring attention.