d. Improve technical platforms and mechanisms to share cybersecurity information and
collaborate with stakeholders, including in highly automated ways.
e. Evaluate the efficacy of, and continue to improve, DHS programs to share or access
classified and unclassified U.S. Government information to protect nonfederal entities.
Outcomes:
Cybersecurity stakeholders increasingly leverage information shared by DHS to quickly
understand cybersecurity risks and protect their information systems.
Objective 3.3: Improve cybersecurity capabilities and resources available to sector-specific
agencies, regulators, and policymakers.
As a sector specific agency for 10 critical infrastructure sectors, DHS must ensure institutional
knowledge and specialized expertise for each of these sectors in order to best support that sector
during steady-state and incident response activities. In addition, DHS has regulatory authority
with respect to chemical and transportation sectors. DHS must maintain relevant expertise,
mature existing voluntary and regulatory partnerships, and continue to integrate cyber and
physical resources for these sectors. DHS must also continue to mature our capabilities to
provide non-DHS sector-specific agencies, regulators, and other policy-making entities with
cybersecurity expertise to inform efforts to protect the Nation’s critical infrastructure. DHS must
leverage its expertise to shape the wide array of federal and nonfederal policies that can drive
significant advancements in cybersecurity.
Sub-Objectives:
a. Enhance sector-specific cyber expertise to understand the potential impact of cyber
incidents and facilitate risk management efforts.
b. Assess and update DHS policies and regulations to address cybersecurity risk to covered
entities.
c. Support each critical infrastructure sector in developing and employing appropriate
cybersecurity approaches and technical support mechanisms.
d. Identify and provide technical and other support to significant non-DHS regulatory and
policy efforts that affect management of national cybersecurity risk.
Outcomes:
All of the 16 critical infrastructure sectors are aware of cyber risks to their sector and maintain
sufficient cybersecurity-related policies and capabilities to support risk management efforts.
14
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents