Sub-Objectives: a. Conduct comprehensive risk and gap assessments across DHS information systems based on consistent methodology and government and industry best practices. b. Deploy appropriate best-in-class technologies and practices, including standardized solutions where cost-effective and operationally feasible to secure legacy systems and cloud or shared services. c. Pursue innovative and agile approaches to acquisition and technology procurement to deploy cutting-edge capabilities and facilitate use of cloud and shared services. d. Pilot innovative capabilities, tools, and other new technologies or practices that can protect DHS systems and are potentially scalable across the federal enterprise level. Outcomes: DHS maintains an adequate level of cybersecurity, commensurate with our own risks and with those of the government-wide enterprise, to ensure the confidentiality, availability, and integrity of critical DHS information systems and information. Goal 3: Protect Critical Infrastructure We will partner with key stakeholders to ensure that national cybersecurity risks are adequately managed. DHS must ensure that growing cybersecurity risks across all critical infrastructure sectors and other systems that impact national security, public health and safety, and economic security are managed at an acceptable level. 4 DHS must partner with key stakeholders, including sector specific agencies and the private sector, to drive better cybersecurity by promoting the development and adoption of best practices and international standards, by providing services like risk assessments and other technical offerings, and by improving engagement efforts to advance cybersecurity risk management efforts. DHS must also expand operationally meaningful cybersecurity information sharing efforts to empower those protecting networks from cyber threats. To these ends, DHS serves an essential partnership role as the sector-specific lead or co-lead for 10 of the 16 critical infrastructure sectors and the Secretary coordinates the overall Federal effort to promote security and resilience across all of the sectors. 5 While continuing to leverage existing partnership structures, DHS must deepen technical collaboration across all the sectors and with other key nonfederal entities on risk mitigation efforts. As the agency 4 Congress authorized DHS to engage broadly with federal and nonfederal entities to collaboratively address cybersecurity risks. See 6 U.S.C. § 148(c)(9). 5 The 16 critical infrastructure sectors are: 1) Chemical; 2) Commercial Facilities; 3) Communications; 4) Critical Manufacturing; 5) Dams; 6) Defense Industrial Base; 7) Emergency Services; 8) Energy; 9) Financial Services; 10) Food and Agriculture; 11) Government Facilities; 12) Healthcare and Public Health; 13) Information Technology; 14) Nuclear Reactors, Materials, and Waste; 15) Transportation Systems; and 16) Water and Wastewater (https://www.dhs.gov/critical-infrastructure-sectors) 11

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents