perspective, these authorities support the USCG’s role as the Maritime Transportation sector specific agency. • Maritime Transportation Security Act of 2002, Public Law 107-85 (46 U.S.C. § 701). The Act provides authority for USCG to introduce cybersecurity requirements for both vessels and facilities through Facility Security Plans and Vessel Security Plans. Executive Orders • Executive Order 13800—Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure (2017). Directs federal agencies to conduct risk reviews and prepare reports related to the cybersecurity of federal networks, critical infrastructure, international cooperation and deterrence, and workforce development. • Executive Order 13773—Enforcing Federal Law with Respect to Transnational Criminal Organizations and Preventing International Trafficking (2017). Sets U.S. policy to strengthen enforcement of federal law in order to thwart transnational criminal organizations, to include those engaged in activity related to corruption, cyber crime, fraud, financial crimes, and intellectual property theft. The Secretary of Homeland Security is directed to work with the Attorney General, Secretary of State, and Director of National Intelligence, to implement the executive order. • Executive Order 13691—Promoting Private Sector Cybersecurity Information Sharing (2015). Tasks DHS with encouraging the development and formation of Information Sharing and Analysis Organizations (ISAOs) and entering into an agreement with a nongovernmental organization to serve as the ISAO Standards Organization to identify a common set of voluntary standards or guidelines for the creation and functioning of ISAOs under the executive order. • Executive Order 13636—Improving Critical Infrastructure Cybersecurity (2013). Directs the Department to increase its cybersecurity information sharing efforts with the private sector, consult on and promote the National Institute of Standards and Technology Cybersecurity Framework, and identify, develop, and maintain a list of critical infrastructure entities where a cybersecurity incident could reasonably result in catastrophic effects on the Nation. Other Presidential Direction • Presidential Policy Directive 41—Cyber Incident Coordination Policy (2016). Sets forth principles governing the Federal Government’s response to any cyber incident and, for significant cyber incidents, establishes an architecture for coordinating the broader response and recovery efforts, through a Cyber Unified Coordination Group with lead federal agencies responsible for coordinating respective lines of effort. During a significant incident, DHS, acting through the NCCIC, is the federal lead agency for asset response activities. DHS also takes information from a given incident and shares it more broadly, so that others will be protected against the same or similar threats. During a significant incident, the Department A-5

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents