Complete Cybersecurity & Privacy

The department, through the Florida Digital Service, shall track implementation by state agencies upon development of such remediation plans in coordination with agency inspectors general. CISA concurred with this recommendation, and in March 2021 agency leadership issued a memorandum that directed several actions to transition transformation activities into operational tasks for implementation by CISA's divisions and mission support offices. According to CISA, this constituted the end of phase three of its transformation effort. However, as of March 2022, CISA had not yet provided documentation detailing how the remaining phase three tasks have been allocated to its divisions and mission support offices or how CISA leadership monitors the status of these tasks to ensure timely completion. Once CISA has provided this information, we will verify whether implementation has occurred. The U.S. Department of Homeland Security released the Cyber Safety Review Board’s first report, which includes 19 actionable recommendations for government and industry.

The Cybersecurity Talent Initiative is the first-of-its-kind public-private partnership aimed at recruiting and training a world-class cybersecurity workforce. The program is a selective opportunity for students in cybersecurity-related fields to gain access to vital public and private sector work experience and even receive substantial student loan assistance. In consultation with the department, through the Florida Digital Service, and the Cybercrime Office of the Department of Law Enforcement, establish an agency cybersecurity response team to respond to a cybersecurity incident.

The focus of this sprint is the DHS workforce, who have done heroic job protecting the integrity of the Nation’s election and responding to several major cyber incidents only a few months thereafter. From launching one of the biggest cybersecurity hiring sprints in the Department’s history to launching a DHS Honors Program, this sprint covers a broad range of activities, all of which are based upon the Department’s commitment to the principles of diversity, equity, and inclusion. We leverage our advantages in technology and cybersecurity consistent with our authorities to strengthen national defense and secure national security systems.

The FBI fosters this team approach through unique hubs where government, industry, and academia form long-term trusted relationships to combine efforts against cyber threats. Our adversaries look to exploit gaps in our intelligence and information security networks. The FBI is committed to working with our federal counterparts, our foreign partners, and the private sector to close those gaps. US-CERT strives for a safer, stronger Internet for all Americans by responding to major incidents, analyzing threats, and exchanging critical cybersecurity information with trusted partners around the world.

This in turn may impair the agency's ability to identify and respond to incidents, such as the cyberattack discovered in December 2020 that caused widespread damage. The memo also directs the civilian agencies to increase their collaboration with the private sector to protect critical infrastructure. To implement the requirements of the Cybersecurity and Infrastructure Security Agency Act of 2018, CISA leadership within the Department of Homeland Security launched an organizational transformation initiative. The act elevated CISA to agency status; prescribed changes to its structure, including mandating that it have separate divisions on cybersecurity, infrastructure security, and emergency communications; and assigned specific responsibilities to the agency. (See figure 1 below.) CISA completed the first two of three phases of its organizational transformation initiative, which resulted in, among other things, a new organization chart, consolidation of multiple incident response centers, and consolidation of points of contact for infrastructure security stakeholders.

There are critical functions the Cybersecurity and Infrastructure Security Agency is supposed to play. It bears much responsibility for protecting our nation’s vulnerabilities in critical infrastructure sectors against devastating possibilities, such aselectromagnetic pulse attacks. Designate an information security manager to administer the cybersecurity program of the state agency. A state agency’s information security manager, for purposes of these information security duties, shall report directly to the agency head.

We are committed to ensuring you have the tools, resources, and support you need to continue doing so successfully. This sprint is dedicated to the Department’s international cybersecurity activities Agency Cybersecurity ranging from those outlined in CISA’s first international “CISA Global” strategy to the U.S. Coast Guard’s Strategic Outlook to protect and operate in cyberspace, an inherently international effort.