CISA Must Update Critical Infrastructure Protection Plans

guest · Sep 20, 2021

CISA Must Update Critical Infrastructure Protection Plans
IG Report on Dams Urges Agency to Make Several Security Improvements
September 20, 2021
https://www.databreachtoday.com/cisa-must-update-critical-infrastructure-protection-plans-a-17575

The U.S. Cybersecurity and Infrastructure Security Agency must update plans to improve the security - both physical and cyber - within the nation's critical infrastructure, according to an inspector general's report that specifically looked at the issue related to the country's dams and levees.

Dams, levees and other water structures are considered part of the 16 critical infrastructure sectors overseen by CISA, according to the U.S. Department of Homeland Security's inspector general's report that examined the agency's response to securing the facilities and overseeing physical security as well as cybersecurity.
Click to expand...

In addition, CISA has not done enough to coordinate various activities related to dam security, including cybersecurity, the report notes.

"These activities include facilitating public-private partnerships, developing strategic goals to mitigate physical and cyber risks and improve resilience, supporting education, training, information and outreach, and providing support to identify vulnerabilities and mitigate incidents," the report notes.
"However, these activities are not centrally managed or formally evaluated, which prevents CISA from determining its impact on Dams Sector security and resilience."
Click to expand...

As part of its report, the inspector general outlines five improvements for CISA to make in regard to securing critical infrastructure, especially dams. In response, CISA Director Jen Easterly wrote that her agency agreed with all the recommendations, including updating the 2013 National Infrastructure Protection Plan to address specific issues related to dams. These updates are scheduled to be published in September 2022.
Recommendations
The inspector general's report offers five recommendations for dam and levee physical security and cybersecurity that CISA has promised to adopt. These include:
Click to expand...

Update the Dams Sector-Specific Plan so that it aligns with the updated National Infrastructure Protection Plan, which CISA is now developing;

Revamp CISA's organizational chart to clarify roles, responsibilities, coordination processes and reporting procedures for dam security;

Establish policies, procedures and performance metrics for CISA programs and activities related to dam security;

Strengthen interagency ties between CISA and other agencies that help oversee dams, such as the Federal Emergency Management Agency;

Encourage the owners and operators of dams to use the HSIN-CI Dams Portal, which provides information sharing among various stakeholders.

Click to expand...

Log in or Sign up

CISA Must Update Critical Infrastructure Protection Plans

guest Guest

Log in or Sign up

CISA Must Update Critical Infrastructure Protection Plans

guest Guest

Useful Searches