Critical Infrastructure Protection: Department of Homeland Security Faces Challenges in Fulfilling Cybersecurity Responsibilities

The purpose of the report is to determine (1) the Department of Homeland Security’s (DHS) roles and responsibilities for cyber critical infrastructure protection, (2) the status and adequacy of DHS’s efforts to fulfill these responsibilities, and (3) the challenges DHS faces in fulfilling its cybersecurity responsibilities.

The report finds that DHS has many cybersecurity-related roles and responsibilities in law and policy. However, there are a number of responsibilities that it has not fully addressed, such as the fact that DHS has not yet developed national cyber threat and vulnerability assessments or government/industry contingency recovery plans for cybersecurity. The report identifies a number of challenges that have impeded DHS’s ability to fulfill its cyber CIP responsibilities. These include achieving organizational stability, gaining organizational authority, overcoming hiring and contracting issues, increasing awareness about cybersecurity roles and capabilities, establishing effective partnerships with stakeholders, achieving two-way information sharing with these stakeholders, and demonstrating the value DHS can provide.

Download at PDF format

Critical Infrastructure Protection : Department of Homeland Security Faces Challenges in Fulfilling Cybersecurity Responsibilities