Sub-Objectives:
a. Conduct comprehensive risk and gap assessments across DHS information systems based
on consistent methodology and government and industry best practices.
b. Deploy appropriate best-in-class technologies and practices, including standardized
solutions where cost-effective and operationally feasible to secure legacy systems and
cloud or shared services.
c. Pursue innovative and agile approaches to acquisition and technology procurement to
deploy cutting-edge capabilities and facilitate use of cloud and shared services.
d. Pilot innovative capabilities, tools, and other new technologies or practices that can
protect DHS systems and are potentially scalable across the federal enterprise level.
Outcomes:
DHS maintains an adequate level of cybersecurity, commensurate with our own risks and with
those of the government-wide enterprise, to ensure the confidentiality, availability, and integrity
of critical DHS information systems and information.
Goal 3:
Protect Critical Infrastructure
We will partner with key stakeholders to ensure that national cybersecurity risks
are adequately managed.
DHS must ensure that growing cybersecurity risks across all critical infrastructure sectors and
other systems that impact national security, public health and safety, and economic security are
managed at an acceptable level. 4 DHS must partner with key stakeholders, including sector
specific agencies and the private sector, to drive better cybersecurity by promoting the
development and adoption of best practices and international standards, by providing services
like risk assessments and other technical offerings, and by improving engagement efforts to
advance cybersecurity risk management efforts. DHS must also expand operationally
meaningful cybersecurity information sharing efforts to empower those protecting networks from
cyber threats. To these ends, DHS serves an essential partnership role as the sector-specific lead
or co-lead for 10 of the 16 critical infrastructure sectors and the Secretary coordinates the overall
Federal effort to promote security and resilience across all of the sectors. 5 While continuing to
leverage existing partnership structures, DHS must deepen technical collaboration across all the
sectors and with other key nonfederal entities on risk mitigation efforts. As the agency
4
Congress authorized DHS to engage broadly with federal and nonfederal entities to collaboratively address
cybersecurity risks. See 6 U.S.C. § 148(c)(9).
5
The 16 critical infrastructure sectors are: 1) Chemical; 2) Commercial Facilities; 3) Communications; 4) Critical
Manufacturing; 5) Dams; 6) Defense Industrial Base; 7) Emergency Services; 8) Energy; 9) Financial Services; 10)
Food and Agriculture; 11) Government Facilities; 12) Healthcare and Public Health; 13) Information Technology;
14) Nuclear Reactors, Materials, and Waste; 15) Transportation Systems; and 16) Water and Wastewater
(https://www.dhs.gov/critical-infrastructure-sectors)
11
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents