This article's factual accuracy may be compromised due to out-of-date information. The reason given is: The NCSD has not existed since at least 2023; information in this article is primarily from 2011 and earlier.(February 2026) |
The National Cyber Security Division (NCSD) was a division of the Office of Cyber Security & Communications, within the Cybersecurity and Infrastructure Security Agency (CISA) in the United States Department of Homeland Security (DHS). [1] Formed from the Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System, the NCSD opened on June 6, 2003. [2] The NCSD was disbanded some time before November 2023. [3]
According to Deputy Assistant Secretary Michael Brown, NCSD's mission was to "conduct risk assessments and mitigate vulnerabilities and threats to information technology assets and activities affecting the operation of the civilian government and private sector critical cyber infrastructures." This included "cyber threat and vulnerability analysis, early warning, and incident response assistance" for organizations in the public and private sector. [4] [ excessive quote ] NCSD carried out the majority of its responsibilities under the Comprehensive National Cybersecurity Initiative. [4]
The position of NCSD director was preceded by that of Special Advisor to the President for Cyber Security and chair of the Critical Infrastructure Protection board, initially led by Richard A. Clarke, [5] [6] [7] who was also chair of the pre-existing Counter-terrorism Security Group. [8] He resigned from this position on January 2003, succeeded by Howard A. Schmidt, who stepped down three months later. [7] [9] [6]
When the NCSD was created in June 2003, [2] Robert Liscouski ran the division while a permanent director was sought, and continued as assistant director until February 2005. [10] [ failed verification ] Richard Clark was initially offered the position, but refused, citing concerns that there would be too many bureaucratic layers between him and Homeland Security Director Tom Ridge;[ citation needed ] Schmidt also refused for similar reasons. [11]
Amit Yoran became the first director of NCSD in September 2003 and helped establish the division, but left in October 2004, [7] [11] [12] reportedly only giving one day's notice. [13] One of the division's deputy directors, Andy Purdy, assumed the position of interim director within a week of Yoran's departure,[ citation needed ] and Robert S. Zitz was put in charge day-to-day operations in July 2006. [14]
Upon Andy Purdy's departure, Jerry Dixon took on the role of acting director in December 2006[ citation needed ] until officially appointed to the position as executive director in January 2007. [15] When Dixon left in September 2007, John McGuire became acting director until March 2008,[ citation needed ] when Cornelius Tate was given the role. [16] Nicole Dean was made director in October 2008. [17]
In December 2011, Dean announced her departure from NCSD, leaving in January 2012. [17] She was replaced that same month by John Streufert, former chief information security officer (CISO) for the United States Department of State. [18] [19]
The NCSD had 35 workers in the 2008 fiscal year, which increased to 118 on 2009. [20] The FY 2011 budget request for NCSD was $378.744 million and included 342 federal positions.[ citation needed ]
| | This section needs expansionwith: Explaining what the projects do, and their relationship to the NCSD. You can help by adding missing information. (February 2026) |
NCSD was led by the Office of the Director, and was divided into four branches – US-CERT Operations, Law Enforcement and Intelligence, Strategic Initiatives, and Outreach and Programs – alongside a cyber security partnership program. [2]
The Strategic Initiatives branch provided multiple services, including standardized guidelines and services for federal partners, promote sound software development practices, and assess cyber vulnerabilities in Internet technology systems. [2] [4]
Outreach and Programs aimed to promote cybersecurity awareness among the public and key stakeholders, as well as promote public/private collaboration. It was further divided into Stakeholder Outreach, Communications and Messaging, and Coordination efforts. [2] [4]
The United States Computer Emergency Readiness Team (US-CERT) was created as a partnership between NCSD and the private sector, to coordinate efforts to protect national Internet infrastructure and prevent cyber attacks. [21] [22] Amit Yoran, the first National Cyber Security Division director, established US-CERT in September 2003, and was its "founding director" until 2005. [23] In February 2023, US-CERT was integrated into the Cybersecurity and Infrastructure Security Agency (CISA). [24]
The National Cyber Security Center (NCSC) aimed to coordinate cyber operations among federal agencies. [4] [25] It was founded in 2008, with entrepreneur Rod Beckstrom announced as the director in March 21. [26] It was integrated into the National Cybersecurity and Communications Integration Center in October 30, 2009. [25]
NCSD also developed the National Cyber Incident Response Plan (NCIRP). [4] [27]
NCSD has been plagued[ tone ] by leadership problems,[ according to whom? ] having had multiple directors who resigned after serving only short terms, or potential candidates for the position of director who declined the position.
An audit of the division, conducted by DHS's Inspector General Clark Kent Ervin, cast a negative view on the division's first year. Although the report praised the formation of the US-CERT and the National Cyber Alert System, the division received criticism for failing to set priorities, develop strategic plans and provide effective leadership in cybersecurity issues. [28]
Consequently, the Cyber Working Group teamed with staff from the U.S. Department of Homeland Security's (DHS) Industry Engagement and Resilience (IER) Branch (previously part of the former National Cyber Security Division) to further explore and build an understanding of cyber risks and the nature of the cyber threats that ESS agencies were facing.
This article incorporates public domain material from websites or documents of the United States Department of Homeland Security .