|
Global Crossing and the Network Security Agreement
What exactly is the Network Security Agreement (NSA)?
On September 24, 2003, the NSA was signed by Global Crossing Ltd. and Singapore Technologies Telemedia Pte Ltd. (ST Telemedia) and by the Federal Bureau of Investigation ("FBI"), the U.S. Department of Justice ("DOJ"), the U.S. Department of Defense ("DOD"), and the Department of Homeland Security ("DHS") (together the "U.S. government agencies") to address U.S law enforcement and national security concerns raised by foreign investment in critical U.S. telecommunications infrastructure.
The NSA has set new standards for Security. As required by our NSA with several U.S. Government agencies, Global Crossing is implementing and following the most stringent security measures in telecommunications today. Our comprehensive, landmark agreement covers the following areas:
- Physical security
- Logical security
- Information security
- Personnel security
Areas are overseen by a Security Committee of the board of directors and subject to independent third-party audits.
Positively impacting our customers.
Set to evolve over time, this precedent-setting agreement sets high standards for network security in the telecommunications industry that will prove positive for our customers.
For example, our agreement creates a "culture of security" throughout Global Crossing. All Global Crossing personnel must participate in special NSA training and are expected to understand and enforce all provisions of the agreement as they relate to particular job functions.
This enables us to offer an unparalleled level of security for local, state and federal government agencies; financial services providers with SEC compliance and transactional security requirements; all businesses transacting e-Commerce across the U.S. network for any reason; and all customers requiring voice, data and video transport over a highly secure network - wherever they may be located.
How the NSA makes it possible.
Network Information and Traffic Security
The NSA establishes a series of measures designed to secure information pertaining to the operation of the Global Crossing network and to protect the traffic crossing the network from unauthorized surveillance and interception. In addition, the agreement sets out measures to control the routing of U.S. domestic voice and data traffic, and employ industry best practices for protecting the network against malicious attacks. It also ensures the secure storage of customer and transactional information.
Personnel
While all Global Crossing personnel are expected to be familiar with the basic provisions of the NSA, specific job functions centered in the U.S. carry greater security responsibilities. The agreement establishes a series of measures designed to ensure the highest integrity amongst Global Crossing employees involved in sensitive network operations - beginning with a screening process. The screening process follows the same guidelines established for U.S. government agencies to screen their civilian federal employees.
Newly hired personnel are also required to sign a non-disclosure agreement approved in advance by the U.S. government agencies that are parties to the Network Security Agreement.
Screened personnel include those with access to or those responsible for:
- network infrastructure
- accessing and monitoring communications, and responsible for data storage
- control of transactional data, call associated data or subscriber information
- persons who have access to sensitive information
- security and information services
Corporate Governance
The NSA establishes a series of measures designed to ensure that Global Crossing's corporate governance is consistent with the goals of the agreement.
- Global Crossing has developed an "Information Security Plan" that defines the proper handling of classified, controlled unclassified, and sensitive information within Global Crossing. It is the standard by which Global Crossing's compliance and performance will be measured by the U.S. government agencies and our third party auditors.
- Internal executive oversight will be provided by a Security Committee of the board of directors. Global Crossing has appointed four board members who have received U.S. government approval and will serve as the Security Committee board members. Additionally, the Head of Network Operations, Head of Global Security and our Security Officer (who will receive security clearances from the U.S. government) will report to the board through the Security Committee in matters relating to the Network Security Agreement.
- Global Crossing's implementation of and compliance with the Network Security Agreement will be periodically evaluated by an independent third party auditor. Independent audits will be conducted to verify Global Crossing's compliance with the Network Security Agreement for the Security Committee of the board of directors and the U.S. government agencies that are party to the agreement.
|