d. Improve technical platforms and mechanisms to share cybersecurity information and collaborate with stakeholders, including in highly automated ways. e. Evaluate the efficacy of, and continue to improve, DHS programs to share or access classified and unclassified U.S. Government information to protect nonfederal entities. Outcomes: Cybersecurity stakeholders increasingly leverage information shared by DHS to quickly understand cybersecurity risks and protect their information systems. Objective 3.3: Improve cybersecurity capabilities and resources available to sector-specific agencies, regulators, and policymakers. As a sector specific agency for 10 critical infrastructure sectors, DHS must ensure institutional knowledge and specialized expertise for each of these sectors in order to best support that sector during steady-state and incident response activities. In addition, DHS has regulatory authority with respect to chemical and transportation sectors. DHS must maintain relevant expertise, mature existing voluntary and regulatory partnerships, and continue to integrate cyber and physical resources for these sectors. DHS must also continue to mature our capabilities to provide non-DHS sector-specific agencies, regulators, and other policy-making entities with cybersecurity expertise to inform efforts to protect the Nation’s critical infrastructure. DHS must leverage its expertise to shape the wide array of federal and nonfederal policies that can drive significant advancements in cybersecurity. Sub-Objectives: a. Enhance sector-specific cyber expertise to understand the potential impact of cyber incidents and facilitate risk management efforts. b. Assess and update DHS policies and regulations to address cybersecurity risk to covered entities. c. Support each critical infrastructure sector in developing and employing appropriate cybersecurity approaches and technical support mechanisms. d. Identify and provide technical and other support to significant non-DHS regulatory and policy efforts that affect management of national cybersecurity risk. Outcomes: All of the 16 critical infrastructure sectors are aware of cyber risks to their sector and maintain sufficient cybersecurity-related policies and capabilities to support risk management efforts. 14

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents