 | |
| Agency overview | |
|---|---|
| Formed | January 1, 2021 |
| Headquarters | Eisenhower Executive Office Building |
| Annual budget | $21 million [1] |
| Agency executive |
|
| Parent agency | Executive Office of the President |
| Website | www |
The Office of the National Cyber Director is an agency in the United States Government statutorily responsible for advising the President of the United States on matters related to cybersecurity. It was established in 2021.
The position of National Cyber Director was established under the National Defense Authorization Act for Fiscal Year 2021 on the recommendation of the Cyberspace Solarium Commission, a congressionally-authorized panel convened in 2019 and chaired by United States Senator Angus King and Representative Mike Gallagher. [2] [3] Situated within the Executive Office of the President of the United States, it is statutorily charged with "programs and policies intended to improve the cybersecurity posture of the United States, ... diplomatic and other efforts to develop norms and international consensus around responsible state behavior in cyberspace" and other matters related to cybersecurity. [4]
Authorizing legislation for the office permitted the hiring of up to 75 staff, however, failed to appropriate any funds to do so. [5] By August 2021, the White House was able to identify $250,000 in contingency funding to hire a few personnel to support inaugural director Chris Inglis. [6] Later in 2021, the Infrastructure Investment and Jobs Act provided $21 million in funding for the ONCD. [7]
On March 2, 2023, the office published a national cybersecurity strategy. [8]
| No. | Name | Term | President(s) served under |
|---|---|---|---|
| 1 | Chris Inglis | July 12, 2021 [2] – February 15, 2023 | Joe Biden |
| – | Kemba Walden (Acting) | February 15, 2023 – November 17, 2023 | |
| – | Drenan Dudley (Acting) | November 17, 2023 - December 15, 2023 | |
| 2 | Harry Coker | December 15, 2023 - Present |
The United States National Security Council (NSC) is the principal forum used by the president of the United States for consideration of national security, military, and foreign policy matters. Based in the White House, it is part of the Executive Office of the President of the United States, and composed of senior national security advisors and Cabinet officials.
The National Cyber Security Division (NCSD) is a division of the Office of Cyber Security & Communications, within the United States Department of Homeland Security's Cybersecurity and Infrastructure Security Agency. Formed from the Critical Infrastructure Assurance Office, the National Infrastructure Protection Center, the Federal Computer Incident Response Center, and the National Communications System, NCSD opened on June 6, 2003. The NCSD mission is to collaborate with the private sector, government, military, and intelligence stakeholders to conduct risk assessments and mitigate vulnerabilities and threats to information technology assets and activities affecting the operation of the civilian government and private sector critical cyber infrastructures. NCSD also provides cyber threat and vulnerability analysis, early warning, and incident response assistance for public and private sector constituents. NCSD carries out the majority of DHS’ responsibilities under the Comprehensive National Cybersecurity Initiative. The FY 2011 budget request for NCSD is $378.744 million and includes 342 federal positions. The current director of the NCSD is John Streufert, former chief information security officer (CISO) for the United States Department of State, who assumed the position in January 2012.
In the United States government, the National Strategy to Secure Cyberspace, is a component of the larger National Strategy for Homeland Security. The National Strategy to Secure Cyberspace was drafted by the Department of Homeland Security in reaction to the September 11, 2001 terrorist attacks. Released on February 14, 2003, it offers suggestions, not mandates, to business, academic, and individual users of cyberspace to secure computer systems and networks. It was prepared after a year of research by businesses, universities, and government, and after five months of public comment. The plan advises a number of security practices as well as promotion of cyber security education.
A cybersecurity regulation comprises directives that safeguard information technology and computer systems with the purpose of forcing companies and organizations to protect their systems and information from cyberattacks like viruses, worms, Trojan horses, phishing, denial of service (DOS) attacks, unauthorized access and control system attacks. There are numerous measures available to prevent cyberattacks.
The Office of Intelligence and Counterintelligence (OICI), also abbreviated IN, DOE-IN, DOE/IN, I&CI, or OIC, was established in 2006 by the merger of pre-existing Energy Department intelligence and security organizations. It is an office of the United States Department of Energy (DOE) responsible for all intelligence and counterintelligence activities throughout the DOE complex; due to this central role, OICI is designated DOE's Headquarters Intelligence. As a component of the United States Intelligence Community in addition to the Department of Energy, OICI reports to both the Director of National Intelligence and Secretary of Energy.
Howard Anthony Schmidt was a partner with Tom Ridge in Ridge Schmidt Cyber LLC, a consultancy company in the field of cybersecurity. He was the Cyber-Security Coordinator of the Obama Administration, operating in the Executive Office of the President of the United States. He announced his retirement from that position on May 17, 2012, effective at the end of the month.
Melissa Hathaway is a leading expert in cyberspace policy and cybersecurity. She served under two U.S. presidential administrations from 2007 to 2009, including more than 8 months at the White House, spearheading the Cyberspace Policy Review for President Barack Obama after leading the Comprehensive National Cybersecurity Initiative (CNCI) for President George W. Bush. She is President of Hathaway Global Strategies LLC, a Senior Fellow and member of the Board of Regents at Potomac Institute for Policy Studies, a Distinguished Fellow at the Centre for International Governance Innovation in Canada, and a non-resident Research Fellow at the Kosciuszko Institute in Poland. She was previously a Senior Adviser at Harvard Kennedy School's Belfer Center.
United States Cyber Command (USCYBERCOM) is one of the eleven unified combatant commands of the United States Department of Defense (DoD). It unifies the direction of cyberspace operations, strengthens DoD cyberspace capabilities, and integrates and bolsters DoD's cyber expertise which focus on securing cyberspace.
Cyberwarfare is the use of computer technology to disrupt the activities of a state or organization, especially the deliberate attacking of information systems for strategic or military purposes. As a major developed economy, the United States is highly dependent on the Internet and therefore greatly exposed to cyber attacks. At the same time, the United States has substantial capabilities in both defense and power projection thanks to comparatively advanced technology and a large military budget. Cyber warfare presents a growing threat to physical systems and infrastructures that are linked to the internet. Malicious hacking from domestic or foreign enemies remains a constant threat to the United States. In response to these growing threats, the United States has developed significant cyber capabilities.
Lisa Oudens Monaco is an American attorney, former federal prosecutor and national security official who has served as the 39th and current United States Deputy Attorney General since April 21, 2021. She is a member of the Democratic Party.
Presidential Policy Directive 20 (PPD-20), provides a framework for U.S. cybersecurity by establishing principles and processes. Signed by President Barack Obama in October 2012, this directive supersedes National Security Presidential Directive NSPD-38. Integrating cyber tools with those of national security, the directive complements NSPD-54/Homeland Security Presidential Directive HSPD-23.
Gabriel "Gabi" Siboni is a colonel in the Israel Defense Forces Reserve service, and a senior research fellow and the director of the Military and Strategic Affairs and Cyber Security programs at the Institute for National Security Studies. Additionally, he serves as editor of the tri-yearly published, Military and Strategic Affairs academic journal at INSS. Siboni is a senior expert on national security, military strategy and operations, military technology, cyber warfare, and force buildup. Siboni is a part-time lecturer at the Francisco de Vitoria University in Madrid.
The Cyber Security Agency (CSA) is a government agency under the Prime Minister's Office, but is managed by the Ministry of Communications and Information of the Government of Singapore. It provides centralised oversight of national cyber security functions and works with sector leads to protect Singapore's Critical Information Infrastructure (CII), such as the energy and banking sectors. Formed on 1 April 2015, the agency also engages with various industries and stakeholders to heighten cyber security awareness as well as to ensure the development of Singapore's cyber security. It is headed by the Commissioner of Cybersecurity, David Koh.
The National Cybersecurity and Communications Integration Center (NCCIC) is part of the Cybersecurity Division of the Cybersecurity and Infrastructure Security Agency, an agency of the U.S. Department of Homeland Security. It acts to coordinate various aspects of the U.S. federal government's cybersecurity and cyberattack mitigation efforts through cooperation with civilian agencies, infrastructure operators, state and local governments, and international partners.
The Cybersecurity and Infrastructure Security Agency (CISA) is a component of the United States Department of Homeland Security (DHS) responsible for cybersecurity and infrastructure protection across all levels of government, coordinating cybersecurity programs with U.S. states, and improving the government's cybersecurity protections against private and nation-state hackers.
The Cyberspace Solarium Commission (CSC) was a United States bipartisan, congressionally mandated intergovernmental body created by the John S. McCain National Defense Authorization Act for Fiscal Year 2019. Its purpose was "to develop a strategic approach to defense against cyber attacks of significant consequences" to the United States. The commission was sunsetted on December 21, 2021, but is continuing its work as a non-profit in 2022, led by Mark Montgomery, the commission's former executive director at the non-profit organization Foundation for the Defense of Democracies (FDD) with a limited staff and the support of a small number of senior advisors. Known as CSC 2.0, this project preserves the legacy and continues the work of the CSC.
Jen Easterly is an American intelligence and former military official who is serving as the director of the Cybersecurity and Infrastructure Security Agency in the Biden administration. She was confirmed by a voice vote in the Senate on July 12, 2021.
The Cyber Safety Review Board was established by the United States Secretary of Homeland Security. Modeled after the National Transportation Safety Board, it will meet in cases of significant cybersecurity incidents. The board's creation was announced upon President Joe Biden's signing of Executive Order 14028 on May 12, 2021.
Operational collaboration is a cyber resilience framework that leverages public-private partnerships to reduce the risk of cyber threats and the impact of cyberattacks on United States cyberspace. This operational collaboration framework for cyber is similar to the Federal Emergency Management Agency (FEMA)'s National Preparedness System which is used to coordinate responses to natural disasters, terrorism, chemical and biological events in the physical world.
Kemba Eneas Walden is an American lawyer who served as the acting National Cyber Director in 2023. She joined the Office of the National Cyber Director as its principal deputy in May 2022. Walden was previously counsel of the digital crimes unit at Microsoft.
| International | |
|---|---|
| National | |
