of Justice, acting through the Federal Bureau of Investigation and the National Cyber Investigative Joint Task Force, is the federal lead agency for threat response activities. USSS and ICE/HSI are responsible for investigating cyber crimes within their jurisdiction and, in the context of a significant cyber incident, will coordinate their threat response activities with the Department of Justice. • Presidential Policy Directive 21—Critical Infrastructure Security and Resilience (2013). Directs the Department to develop and implement strategic approaches to increase situational awareness of physical and cyber threats to infrastructure, and reinforces the need for holistic thinking about security and risk management. • Presidential Policy Directive 8 – National Preparedness (2011). Directs the Department to lead and coordinate the development of the national preparedness system, which includes “a series of integrated national planning frameworks.” The National Response Framework is part of this national preparedness system and “sets the strategy and doctrine for how the whole community builds, sustains, and delivers the Response core capabilities identified in the National Preparedness Goal in an integrated manner with the other mission areas.” • National Security Presidential Directive-54/Homeland Security Presidential Directive23—Cybersecurity Policy (2008). Sets forth aspects of the Department’s operational role, particularly in protecting federal information systems. • Homeland Security Presidential Directive 5 - Management of Domestic Incidents, as amended (2003). Enhances the ability of the United States to manage domestic incidents by establishing a single, comprehensive national incident management system (NIMS). This directive designates the Secretary of Homeland Security as the principal federal official for domestic incident management and provides that the Secretary shall coordinate the Federal Government’s resources utilized in response to or recovery from terrorist attacks, major disasters, or other emergencies if and when any one of four specific conditions applies, including where one or more federal department or agency is substantially involved in the incident response. A-6