10 November 1997
Source: Mail list cypherpunks@toad.com

    Date: Mon, 10 Nov 1997 08:50:20 -0800 (PST)
    From: Declan McCullagh <declan@well.com>
    To: fight-censorship@vorlon.mit.edu, cypherpunks@toad.com
    Subject: President's critical infrastructure commission and crypto

    ---------- Forwarded message ----------
    Date: Sat, 08 Nov 1997 20:36:10 -0500
    From: Kawika Daguio <KDAGUIO@aba.com>
    To: fight-censorship-announce@vorlon.mit.edu, declan@well.com
    Subject: FC: President's critical infrastructure commission and crypto -Reply

    I worked with the PCCIP and the National Security Telecommunications
    Advisory Council on their recent infrastructure assurance reports.
    The financial sector received high marks and won praise from both groups.
    We shared more information about ourselves and our systems than anyone
    other than the regulators have ever seen.  The investigators were
    impressed, as would you be if you were to see the unreleased parts of
    the report.

    I expect, however, that much of the report will never be released.

    Some of the information we shared included pictures, and physical
    locations (addresses, floor diagrams), and network diagrams
    identifying payment system and other financial sector traffic and
    infrastructure.  These kinds of data were shared only because of the
    protective terms of the information sharing understandings.  This
    information will not be made public as long as it remains sensitive.

    Other information about the specific security infrastructures or the
    typical security infrastructures employed by banks and the ways we
    prevent, detect, contain, and pursue compromises is also sensitive.

    I would hope that those seeking information about the unreleased
    portions of the report recognize our interest in protecting sensitive
    information.

    ******
    my opinion
    my employer's may differ
    ******
    kawika daguio

    Note: Kawika Daguio works with the American Bankers Association.

    See the unclassified version of the PCCIP report:

       http://www.pccip.gov/report_index.html