Comprehensive National Cybersecurity Initiative

Last updated

The Comprehensive National Cybersecurity Initiative (CNCI) outlines U.S. cybersecurity goals across multiple agencies including the Department of Homeland Security, the Office of Management and Budget, and the National Security Agency. The initiative was established by President George W. Bush in January 2008 in National Security Presidential Directive 54/Homeland Security Presidential Directive 23 (NSPD-54/HSPD-23). [1] [2]

Contents

Details

Utah Data Center, Bluffdale, Utah. Utah Data Center Panorama (cropped).jpg
Utah Data Center, Bluffdale, Utah.

During 2008, the initial signing of the initiative and hearings about the initiative was kept classified. [3] However, in March 2010, the Obama administration declassified limited material about the project. [4]

The goals of the initiative include: establishing a front line of defense against network intrusion; defending the U.S. against the full spectrum of threats through counterintelligence; and strengthening the future cybersecurity environment through education, coordination and research. [5]

The main actions of the CNCI are: [6]

On January 6, 2011, the National Security Agency (NSA) began building the first of a series of data centers pursuant to the program. [7] [8] The $1.5 billion Community Comprehensive National Cybersecurity Initiative Data Center, also known as the Utah Data Center, is located at Camp Williams, Utah. [9]

See also

Notes

  1. "National Security Presidential Directives [NSPD] George W. Bush Administration". Federation of American Scientists. Retrieved 7 January 2011.
  2. "Computer Network Security & Privacy Protection" (PDF). Department of Homeland Security. Retrieved 7 January 2011.
  3. "Hearing on NSPD-54/HSPD-23 and the Comprehensive National Cyber Security Initiative". Senate.gov. Retrieved 7 January 2011.
  4. Vijayan, Jaikumar (2 March 2010). "Obama administration partially lifts secrecy on classified cybersecurity project". Computerworld. Retrieved 7 January 2011.
  5. "The Comprehensive National Cybersecurity Initiative". whitehouse.gov . Retrieved 7 January 2011 via National Archives.
  6. "Archived copy" (PDF). Archived from the original (PDF) on 2017-02-02. Retrieved 2017-01-28.{{cite web}}: CS1 maint: archived copy as title (link)
  7. LaPlante, Matthew D. (July 2, 2009). "New NSA center unveiled in budget documents". Salt Lake Tribune. MediaNews Group. Retrieved 2009-07-05.
  8. LaPlante, Matthew D. (July 2, 2009). "Spies like us: NSA to build huge facility in Utah". Salt Lake Tribune. MediaNews Group. Retrieved 2009-07-05.
  9. Fidel, Steve. "Utah's $1.5 billion cyber-security center under way". Deseret News. Archived from the original on January 9, 2011. Retrieved 6 January 2011.

Related Research Articles

<span class="mw-page-title-main">National security directive</span> Classified instructions from the US president

National security directives are presidential directives issued for the National Security Council (NSC). Starting with Harry Truman, every president since the founding of the National Security Council in 1947 has issued national security directives in one form or another, which have involved foreign, military and domestic policies. National security directives are generally highly classified and are available to the public only after "a great many years" have elapsed. Unlike executive orders, national security directives are usually directed only to the National Security Council and the most senior executive branch officials, and embody foreign and military policy-making guidance rather than specific instructions.

<span class="mw-page-title-main">National Cyber Security Division</span>

The National Cyber Security Division (NCSD) is a division of the Office of Cyber Security & Communications, within the United States Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. Formed from the Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System, NCSD opened on June 6, 2003.

A cybersecurity regulation comprises directives that safeguard information technology and computer systems with the purpose of forcing companies and organizations to protect their systems and information from cyberattacks like viruses, worms, Trojan horses, phishing, denial of service (DOS) attacks, unauthorized access and control system attacks. While cybersecurity regulations aim to minimize cyber risks and enhance protection, the uncertainty arising from frequent changes or new regulations can significantly impact organizational response strategies.

The Privacy and Civil Liberties Oversight Board (PCLOB) is an independent agency within the executive branch of the United States government, established by Congress in 2004 to advise the President and other senior executive branch officials to ensure that concerns with respect to privacy and civil liberties in the United States are appropriately considered in the development and implementation of all laws, regulations, and executive branch policies related to terrorism.

The National Security and Homeland Security Presidential Directive, signed by President of the United States George W. Bush on May 4, 2007, is a Presidential Directive establishing a comprehensive policy on the federal government structures and operations in the event of a "catastrophic emergency". Such an emergency is defined as "any incident, regardless of location, that results in extraordinary levels of mass casualties, damage, or disruption severely affecting the U.S. population, infrastructure, environment, economy, or government functions."

The EINSTEIN System is a network intrusion detection and prevention system that monitors the networks of US federal government departments and agencies. The system is developed and managed by the Cybersecurity and Infrastructure Security Agency in the United States Department of Homeland Security (DHS).

<span class="mw-page-title-main">Camp Williams</span> Military base south of Bluffdale, Utah

Camp W. G. Williams, commonly known as Camp Williams, also known as Army Garrison Camp Williams, is a National Guard training site operated by the Utah National Guard. It is located south of Bluffdale, west of Lehi, and north of Saratoga Springs and Cedar Fort, approximately 25 miles (40 km) south of Salt Lake City, straddling the border between Salt Lake County and Utah County in the western portion of the Traverse Mountains. Camp Williams is also home to the Non-Commissioned Officer's Basic Leader Course, which is taught to Active, National Guard, and Reserve components.

Melissa Hathaway is a leading expert in cyberspace policy and cybersecurity. She served under two U.S. presidential administrations from 2007 to 2009, including more than 8 months at the White House, spearheading the Cyberspace Policy Review for President Barack Obama after leading the Comprehensive National Cybersecurity Initiative (CNCI) for President George W. Bush. She is President of Hathaway Global Strategies LLC, a Senior Fellow and member of the Board of Regents at Potomac Institute for Policy Studies, a Distinguished Fellow at the Centre for International Governance Innovation in Canada, and a non-resident Research Fellow at the Kosciuszko Institute in Poland. She was previously a Senior Adviser at Harvard Kennedy School's Belfer Center.

<span class="mw-page-title-main">Department of Defense Cyber Crime Center</span> United States defense organization

The Department of Defense Cyber Crime Center (DC3) is designated as a Federal Cyber Center by National Security Presidential Directive 54/Homeland Security Presidential Directive 23, as a Department of Defense (DoD) Center Of Excellence for Digital and Multimedia (D/MM) forensics by DoD Directive 5505.13E, and serves as the operational focal point for the Defense Industrial Base (DIB) Cybersecurity program. DC3 operates as a Field Operating Agency (FOA) under the Inspector General of the Department of the Air Force.

Homeland Security Presidential Directive (HSPD)-8, National Preparedness, describes the way United States Federal agencies will prepare for an incident. It requires Department of Homeland Security to coordinate with other Federal agencies and with State, local, and Tribal governments to develop a National Preparedness Goal with Emergency management. Congressional laws enacted, following the wake of 9/11, which resulted in new developments in the way security was assessed and addressed in the United States, to prevent and respond to threatened or actual domestic terrorist attacks, disasters, and other emergencies by requiring a national domestic all-hazards preparedness goal. HSPD 5, HSPD-7, HSPD-8, and HSPD-8 Annex 1 are directives that deal with the preparedness goals.

<span class="mw-page-title-main">Gordon M. Snow</span>

Gordon M. Snow was an assistant director of the FBI over the Cyber Division through 2012, the FBI Director of Counterintelligence for the Middle East in 2001, and currently directs Global Security Operations for Cleveland Clinic.

Cyberwarfare is the use of computer technology to disrupt the activities of a state or organization, especially the deliberate attacking of information systems for strategic or military purposes. As a major developed economy, the United States is highly dependent on the Internet and therefore greatly exposed to cyber attacks. At the same time, the United States has substantial capabilities in both defense and offensive power projection thanks to comparatively advanced technology and a large military budget. Cyberwarfare presents a growing threat to physical systems and infrastructures that are linked to the internet. Malicious hacking from domestic or foreign enemies remains a constant threat to the United States. In response to these growing threats, the United States has developed significant cyber capabilities.

<span class="mw-page-title-main">Utah Data Center</span> NSA data storage facility

The Utah Data Center (UDC), also known as the Intelligence Community Comprehensive National Cybersecurity Initiative Data Center, is a data storage facility for the United States Intelligence Community that is designed to store data estimated to be on the order of exabytes or larger. Its purpose is to support the Comprehensive National Cybersecurity Initiative (CNCI), though its precise mission is classified. The National Security Agency (NSA) leads operations at the facility as the executive agent for the Director of National Intelligence. It is located at Camp Williams near Bluffdale, Utah, between Utah Lake and Great Salt Lake and was completed in May 2014 at a cost of $1.5 billion.

<span class="mw-page-title-main">Lisa Monaco</span> American attorney (born 1968)

Lisa Oudens Monaco is an American attorney who has served as the thirty-ninth United States deputy attorney general since April 21, 2021. She is a member of the Democratic Party.

Presidential Policy Directive 20 (PPD-20), provides a framework for U.S. cybersecurity by establishing principles and processes. Signed by President Barack Obama in October 2012, this directive supersedes National Security Presidential Directive NSPD-38. Integrating cyber tools with those of national security, the directive complements NSPD-54/Homeland Security Presidential Directive HSPD-23.

In the United States, a presidential directive, or executive action, is a written or oral instruction or declaration issued by the president of the United States, which may draw upon the powers vested in the president by the Constitution of the United States, statutory law, or, in certain cases, congressional and judicial acquiescence.

The National Cybersecurity and Communications Integration Center (NCCIC) is part of the Cybersecurity Division of the Cybersecurity and Infrastructure Security Agency, an agency of the U.S. Department of Homeland Security. It acts to coordinate various aspects of the U.S. federal government's cybersecurity and cyberattack mitigation efforts through cooperation with civilian agencies, infrastructure operators, state and local governments, and international partners.

<span class="mw-page-title-main">National Initiative for Cybersecurity Education</span> American government program for cybersecurity education

The National Initiative for Cybersecurity Education (NICE) is a partnership between government, academia, and the private sector focused supporting the country's ability to address current and future cybersecurity education and workforce challenges through standards and best practices. NICE is led by the National Institute of Standards and Technology (NIST) in the U.S. Department of Commerce.

<span class="mw-page-title-main">Cybersecurity and Infrastructure Security Agency</span> Agency of the United States Department of Homeland Security

The Cybersecurity and Infrastructure Security Agency (CISA) is a component of the United States Department of Homeland Security (DHS) responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government's cybersecurity protections against private and nation-state hackers.

Operational collaboration is a cyber resilience framework that leverages public-private partnerships to reduce the risk of cyber threats and the impact of cyberattacks on United States cyberspace. This operational collaboration framework for cyber is similar to the Federal Emergency Management Agency (FEMA)'s National Preparedness System which is used to coordinate responses to natural disasters, terrorism, chemical and biological events in the physical world.