d. Support emergency management efforts under the National Response Framework for
cyber incidents that may result in physical impacts or otherwise impede disaster response
and recovery efforts.
e. Plan and exercise for cyber incident response at the local, regional, national, and
international level.
Outcomes:
DHS responds to cyber incidents by providing technical and other asset response assistance,
where requested and appropriate, and supporting national-level decision-making and emergency
management efforts.
Objective 5.3: Increase cooperation between incident responders to ensure complementary threat
response and asset response efforts.
Threat response activities include efforts by DHS and non-DHS law enforcement agencies to
combat cyber crimes and national security threats through investigations that identify malicious
actors and seek to prevent or deter additional illicit cyber activity. Effective incident response
requires an understanding of the methods and intent of the responsible threat actors as well as the
provision of asset response assistance. DHS investigative and intelligence assets must
collaborate with asset responders, other entities responding to incidents, and affected entities to
share information regarding the threat to prevent additional harm. Such information must be
integrated with information available from other law enforcement agencies, the intelligence
community, and other sources. DHS must also promote effective coordination between all
agencies responding to a cyber incident in the field to enhance the timeliness and effectiveness of
response efforts.
Sub-Objectives:
a. Leverage DHS and non-DHS investigative resources to provide incident and threat
attribution information to all federal incident responders and sector specific agencies.
b. Develop holistic assessments of adversaries, threats, and incidents to aid asset and threat
response, as well as protective and planning efforts.
c. Improve mechanisms to increase field-level collaboration on cybersecurity issues and
coordinate the provision of federal response assistance when appropriate.
Outcomes:
DHS responds to incidents and engages impacted entities in a coordinated fashion, enabling
access to the expertise and capabilities of all threat and asset responders.
21
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents