SpiderOak and Policy Management

May 5, 2019

Technology Issues

The policies of agencies can be enforced by new technology.

Data and controls can be protected with private blockchain.

Example:

A written policy of an organizations policy says “don’t steal data”.

No way to enforce the policy with current technology. Gaps are managed by rules and controls.

Issues:

The code we use in organizations is called a Trusted Computing Base.

All code has defects (Let’s just say about 1 every 1,000 lines of code).

Most agencies have millions of lines of code.

Most defects are known and can be acquired by hackers and bad actors.

Solutions

It is possible to reduce the trusted computing base and the trusted base of people by using distributed ledger (private blockchain).

Summary

New technology allows organizations to have better people and data controls.

Reducing the Trusted Base allows for agencies to focus on missions.

Insider threats can be stopped.