On Thu, Jan 6, 2011 at 10:41 AM, Thomas Kibui <thomas.kibui@gmail.com>wrote:
In order for any information security breach to have impact, the victim of such a breach must value their data and information. Once data and information is assigned a value (economic or social or reputation or other forms) and risks are computed based on those values, then that data and/or information becomes an asset to be protected.
I stand to be corrected but I assume that most of the data and information that our police hold is on paper (those A3 size occurrence books (OBs) written in ink). In this case an information security breach that can impact the Police today would be the loss or or un-authorized access to the warehouse or container that holds those OBs.
Defacing their website today is therefore equivalent to covering the notice board in Vigilance house with a piece of paper .. .. .. value-wise .. zero .. "a fart in the wind" .. and life moves on un-perturbed. Some would say ignorance is bliss and such ignorance may have "saved" them for now BUT such ignorance eventually renders one irrelevant.
The question we should be asking are..
1. Does Kenya Police have a sustainable IT infrastructure and knowledge to manage the massive volume of information that they handle on a daily basis ? 2. Does the Kenya Police have a plan to digitize the data and information they hold or will the OBs continue to be used ? 3. When will the Kenya Police begin to capture, process and disburse information in electronic format ?
The answers to this questions and many others are the ones that will begin to create "value" for communication tools like a website or a server. Otherwise for now they are only concerned about where Itere's re-organization plans.
You are spot on! As much as I can tell, from what I have heard in the media, quoting Police topdogs there are no such plans to digitize Police operations. It would be interesting to hear this from the Police themselves, but not from the spokesman. Do they even have a designated IT director? That would give you an indication on where they stand. I don't know of a way to take them to task. I'd have loved to do it and let them respond to us. Perhaps the director of govt IT Directorate or something. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!