Sub-Objectives: a. Understand the interdependencies across critical infrastructure and systemic risks that affect national security, public health and safety, and economic security. b. Evaluate the efficacy, quality, and usage of DHS cybersecurity risk management offerings provided to various critical infrastructure and other key stakeholders. c. Assess impact of engagement by DHS personnel on progress toward adoption of best practices and usage of DHS offerings. d. Identify and prioritize gaps in current national cybersecurity risk management efforts. e. Address identified gaps through tools, services, and other offerings provided to critical infrastructure owners and operators or other key entities. f. Establish mechanisms to mitigate persistent cybersecurity risks with a potential significant impact on national security, public health and safety, or economic security. Outcomes: DHS reduces the most significant national risks to critical infrastructure, especially those where incidents could have a significant impact on national security, public health and safety, and economic security. Objective 3.2: Expand and improve sharing of cyber threat indicators, defensive measures, and other cybersecurity information. DHS must assess and improve existing information sharing efforts to ensure that the most operationally useful information is provided to our stakeholders. We serve as the main federal interface for receiving and sharing cyber threat indicators and defensive measures between and among nonfederal entities and with other agencies. 8 DHS must build on and expand automated mechanisms to receive, analyze, and share cyber threat indicators, defensive measures, and other cybersecurity information with critical infrastructure and other key stakeholders. DHS must continue to pursue programs for sharing vulnerability information and classified cybersecurity information where appropriate, while also emphasizing the need to rapidly declassify cyber threat and associated contextual information. DHS must continue to partner with information sharing and analysis centers and other information sharing and analysis organizations to increase access to and collaboration regarding cybersecurity information. We must identify and address barriers to sharing information with the U.S. Government and between agencies. In addition to expanding its information sharing and collaboration capacities, DHS must improve its analytic capabilities to enhance the quantity and quality of information shared and increase the value of information sharing programs for all critical infrastructure stakeholders. Sub-Objectives: a. Continue to expand participation in information sharing programs and increase the cybersecurity information shared by all participants. b. Support engagement with information sharing and analysis centers, information sharing and analysis organizations, and other information sharing entities or fora. c. Increase the ability of DHS to analyze, correlate, and enrich data received and shared with all cybersecurity information sharing partners. 8 The terms “cyber threat indicator” and “defensive measure” are defined in the Cybersecurity Information Sharing Act of 2015, at 6 U.S.C. § 1501. 13