Re: [nznog] TICSA - Public Service Announcement

Thanks Mark. Yep. This wouldn't be a surprise for anyone who was at the conference where the two GCSB guys went through this step by step and took tons of feedback from the audience. See how important those conferences are? Dean On Monday, May 12, 2014, Mark Foster wrote:

No Joke, Skeeve.

There was a talk at the last NZNOG about it, the two guys at the front of the room from GCSB (hi, guys!) got a bit clobbered by the room.

A quick google presented this URL:

http://blog.altan.me/ticsa-overview/

... which has the video and a very high level set of bullets about what it entails.

The legislation was passed whilst parliament was sitting 'under urgency', and here we are.

The GCSB guys have been working hard to try to make it reasonable, but the law itself is the issue and I personally feel that passing it 'under urgency' was a bit cheeky and underhanded. So they're doing their best with the hand they were dealt.

Thing is, it's now law, so we have no choice but to abide by it. The mandate is around national security, so we can only presume that GCSB have some good intel sources and their pool of learned engineers will be looking for actual potential risks to national security. I gather they will simply raise concerns, where possible providing as much information as possible as to why the item raised is a concern, and seek to ensure that appropriate mitigation measures are put in place.

I for one will be interested to see what happens when the full force of this particular piece of law is first tested.

Mark.

On 12/05/2014 5:50 p.m., Skeeve Stevens wrote:

Hang on... is this serious?

You aren't allowed to upgrade some equipment without informing the GCSB unless it is the same make and similar model?

How did this ACT get through?

...Skeeve

*Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz

Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ; linkedin.com/in/skeeve

twitter.com/theispguy ; blog: www.theispguy.com

The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

On Mon, May 12, 2014 at 2:59 PM, Dean Pemberton wrote:

Hey all,

So the TICSA came into effect today.

Things to remember: The Act requires that network operators register their information with the Police Registrar. Details here:

http://www.police.govt.nz/about-us/programmes-and-initiatives/telecommunicat...

The NCSC has also produced some guidance for Network Operators which is worth a read.

http://ncsc.govt.nz/assets/TICSA/NCSC-Guidance-for-Network-Operators.pdf

The GCSB have also published a list of exceptions for Operators with regard to what you're required to notify them of.

http://ncsc.govt.nz/assets/TICSA/Notice-of-Exemptions.pdf

As you were =) _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog