“Today’s vote is a significant step to stand up a federal government cybersecurity agency,” said DHS Secretary Kirstjen Nielsen. “The cyber threat landscape is constantly evolving, and we need to ensure we’re properly positioned to defend America’s infrastructure from threats digital and physical.  It was time to reorganize and operationalize NPPD into the Cybersecurity and Infrastructure Security Agency.  I thank Chairman Michael McCaul and Ranking Member Bennie Thompson for recognizing our critical role and both starting and completing this transformation in the House of Representatives.  I also thank Chairman Ron Johnson and Ranking Member Claire McCaskill for their tireless support of the CISA Act in the Senate.”

“I also want to thank all the hardworking men and women of NPPD for carrying out our important cybersecurity mission each day within DHS. CISA will help bring the recognition this team deserves and will empower the team to more effectively execute its vital mission.”

“The CISA Act passing Congress represents real progress in the national effort to improve our collective efforts in cybersecurity,” said NPPD Under Secretary Christopher Krebs. “Elevating the cybersecurity mission within the Department of Homeland Security, streamlining our operations, and giving NPPD a name that reflects what it actually does will help better secure the nation’s critical infrastructure and cyber platforms.  The changes will also improve the Department’s ability to engage with industry and government stakeholders and recruit top cybersecurity talent.”

Source: DHS

The post Congress passes DHS cyber agency legislation appeared first on Intelligence Community News.

“I am pleased that President Trump intends to nominate Dr. Joseph Cuffari as Inspector General (IG) at the Department of Homeland Security. Dr. Cuffari’s leadership will help to provide crucial oversight to ensure excellency, integrity and accountability throughout all programs and operations.

The Department has a long-standing commitment to combating waste, fraud and abuse, and Dr. Cuffari has demonstrated his resolve to do so throughout a variety of roles. His decades of experience, including more than 40 years in the U.S. Air Force and more than 20 years at the Department of Justice (DOJ), will make him an invaluable member of the Department’s leadership team.  I thank Dr. Cuffari for his willingness to serve in government again and urge the Senate to swiftly confirm him to this important position.”

Source: DHS

The post President Trump to nominate Joseph Cuffari as DHS IG appeared first on Intelligence Community News.

Secretary Kirstjen Nielsen established the DHS Countering Weapons of Mass Destruction (CWMD) Office in December 2017 in one of the most significant reorganizations of the Department in a decade. If enacted into law, this legislation would permanently establish the office and grant it new authorities to protect the American people against evolving WMD threats. The CWMD Office is currently led by Assistant Secretary James F. McDonnell, who was appointed by President Trump in May 2018.

“The United States faces rising danger from terrorist groups and rogue nation states who could use weapons of mass destruction to harm Americans,” said Secretary Nielsen. “Although DHS has broad authorities to guard against radiological and nuclear dangers, we don’t have the authorities we need to do the same against biological and chemical threats. We must stay a step ahead of our enemies, and this legislation would help us do that. I applaud the House Homeland Security Committee for their leadership in developing this legislation—especially Chairman Michael McCaul and Rep. Dan Donovan—and all House members who voted to enhance our defenses against WMD threats. I now urge the Senate to do the same—to pass this legislation and send it to the President’s desk for signature.”

Source: DHS

The post House of Representatives votes to authorize DHS Countering Weapons of Mass Destruction office appeared first on Intelligence Community News.

“An interconnected world offers a myriad of benefits to American businesses and the public, but the innovations and conveniences of modern technology pose new and complex security challenges,” said Kirstjen Nielsen, secretary of the Department of Homeland Security. “With the majority of critical infrastructure owned and operated by the private sector, it is essential that we maintain strong partnerships between DHS and the private sector to underpin our collective defense against the evolving threats we all face. Because of our increasing hyper-connectivity, cybersecurity remains a shared responsibility; too big for anyone acting alone. This summit is another opportunity to gather our interagency and private partners and chart our shared path to protect our nation’s critical infrastructure against cyber threats and achieve a secure and resilient cyberspace.”

“There is an evident need for a coordinated, cross-sector, government-industry effort to protect our nation’s critical infrastructure from the growing cybersecurity threat,” said Christopher Krebs, under secretary for the National Protection and Programs Directorate. “DHS is leading the federal government’s efforts to champion that coordinated, integrated approach and this summit is a clear signal from government and industry alike that we need to move beyond simply sharing threat information – we need to advance efforts to manage risk in a prioritized manner.  The summit is just the start of that movement, as we sprint forward with a shared vision of the actions and respective expectations of how we will address risk together.”

Source: DHS

The post DHS to host National Cybersecurity Summit appeared first on Intelligence Community News.

To accomplish this new stance, the Department of Homeland Security’s Science and Technology Directorate (S&T) is working in tandem with DHS operational components by conducting research and development (R&D) in numerous areas that will help strengthen DHS’s ability to detect and defend against cyberattacks.

Speaking at the RSA Conference in San Francisco last month, Secretary Nielsen said, “I have a news flash for America’s adversaries: Complacency is being replaced by consequences. We will not stand on the sidelines while our networks are compromised. We will not abide the theft of our data, our innovation and our resources. And we will not tolerate cyber meddling aimed at the heart of our democracy.”

She added that DHS is adopting a more forward-leaning posture that will bolster the nation’s digital defenses by prioritizing enhancements in risk identification, vulnerability reduction, threat reduction and consequence mitigation. The new plan also included a new focal area: enabling cybersecurity outcomes.

“As the R&D arm of DHS, S&T is working on a wide range of research efforts that will greatly enhance the cybersecurity posture of critical infrastructure systems and the online environment,” said William N. Bryan, Senior Official Performing the Duties of the Under Secretary for Science and Technology. “These research efforts will lead to the development and implementation of new solutions that will make it possible for DHS to achieve the new cybersecurity strategy that Secretary Nielsen outlined in the new DHS Cybersecurity Strategy.”

S&T is conducting several R&D project that support the newly-introduced strategy.

1. Risk Identification

“We must be more aware of vulnerabilities built into the fabric of the internet and other widespread weaknesses …We must also prioritize securing essential functions across sectors, including those executed through multiple assets and systems,” Secretary Nielsen said in her RSA Conference remarks.

S&T’s Application of Network Measurement Science (ANMS) project is developing innovative technologies that will provide the capability to identify, classify, report, predict, provide attribution and potentially mitigate network/internet disruptive events. Additionally, the Next Generation Cyber Infrastructure Apex program is addressing the cyber challenges facing our nation’s critical infrastructure sectors, enabling these essential entities to operate effectively even in the face of sophisticated, targeted cyberattacks.

2. Vulnerability Reduction

“Looking out five years, DHS aims to have far greater awareness of dangerous threats before they hit our networks … to dismantle major illicit cyber networks in minutes, not months … and to be faster, smarter and more effective in responding to incidents,” Secretary Nielsen said.

Among S&T’s many projects supporting this area is the Critical Infrastructure Design and Adaptive Resilient Systems project, which develops the technical basis and analytical tools needed to support cross-sector cybersecurity risk assessments. It also identifies standards of practice to support the expanded use of risk methodologies for cyber and physical systems and resource planning.

Separately, the Cybersecurity for the Oil and Gas Sector project undertakes collaborative R&D efforts to improve the level of cybersecurity in critical systems of interest to the oil and natural gas sector. These projects are driven by the Critical Infrastructure Security and Resilience Research and Development Implementation Plan, which outlines federal R&D priorities and activities to strengthen critical infrastructure security and resilience.

3. Threat Reduction

This area is focused on reducing cyber-threats by countering transnational criminal organizations and sophisticated cyber-criminals.

Among S&T’s many projects supporting this area is the Anonymous Networks and Currencies and Cyber Forensics projects, which are developing cost-effective and novel solutions to aid law enforcement agencies in their investigations of criminal activity in these areas. S&T also offers Autopsy, an open-source, digital forensics platform and iVe, a vehicle navigation infotainment system forensics tool used by law enforcement agencies worldwide. Autopsy determines how a digital device was used in a crime and recovers evidence, and is enhanced with the addition of several new capabilities requested by law enforcement. The iVe technology is a digital forensics toolkit that obtains digital evidence from vehicle navigation and infotainment systems. This technology is currently supported in more than 10,000 vehicle models.

Also, S&T’s Network System Security program is comprised of the previously mentioned ANMS, Distributed Denial of Service Defense and Federated Security projects, all of which are working on solutions to secure IT networks and emergency response networks from cyberattacks.

4. Consequence Mitigation

In the new plan, this focus is described as minimizing consequences from potentially significant cyber incidents.

To make it harder for cybercriminals to hack networks and systems, S&T’s Cyber Physical System Security project is helping ensure security considerations are added into the design of cyber physical systems, such as the Internet of Things, while they are being built. Also, S&T is working closely with the National Institute of Standards and Technology on its Global Cities Team Challenge (GCTC) to raise awareness for cybersecurity and privacy needs in emerging “smart cities” systems. The Smart and Secure Cities and Communities Challenge is encouraging GCTC participants to adopt designed-in cybersecurity for “smart city” systems that are more secure, reliable, resilient and protective of privacy.

5. Enable Cybersecurity Outcomes

This pillar talks about prioritizing DHS cybersecurity R&D and tech transition plus expanding international cooperation to ensure an open, interoperable, secure and reliable internet.

S&T’s Transition to Practice Program is leading the effort to transition government-funded cybersecurity technologies to the marketplace. Earlier this month, the program announced its 20^th transition, which equals half the technologies enrolled in the transition-to-market program.

On the international front, S&T enjoys a range of international partnerships on many issues, including cybersecurity. Next month, S&T will award its first international awards to U.S.-Dutch research teams that will be working on Distributed Denial of Service Defense and Industrial Control Systems/Supervisory Control and Data Acquisition projects. S&T also has cybersecurity-focused partnerships with more than 20 countries and international organizations that includes Great Britain, Israel, Australia, New Zealand, Canada and the European Union.

 Supporting all cyber research and development efforts

Supporting each of the aforementioned projects and in fact all S&T cybersecurity R&D projects is the Cybersecurity Research Infrastructure program, which is comprised of the Information Marketplace for Policy and Analysis of Cyber-risk & Trust and Experimental Research Testbed. The former supports the global cyber-risk research community by coordinating and developing real-world data and information-sharing capabilities including tools, models and methodologies, while the latter enables cybersecurity researchers to run their advanced defense solutions safely against live threats on a “virtual internet” without endangering other research or the larger internet.

These research areas represent only a handful of S&T’s cybersecurity R&D projects. Read the 2018 Cybersecurity Portfolio Guide and view the cybersecurity projects page to see the breadth of S&T’s research reach. Additionally, at RSA, S&T demonstrated 13 mature, transition-ready cybersecurity solutions from across its broad R&D portfolio.

Source: DHS

The post DHS S&T outlines cybersecurity R&D projects appeared first on Intelligence Community News.

“Pursuant to President Trump’s Executive Order 13800, DHS has developed ways to improve our protection of the federal networks, work more collaboratively with our private sector partners, and reduce the threat of automated cyber-attacks from botnets. The work undertaken reflects months of extensive research and collaboration with the private sector.

“DHS has recommended ways to improve our federal risk posture and modernize the federal IT enterprise. Additionally, the Department has outlined how it will prioritize private sector access to tailored intelligence and capabilities in order to mitigate risk where a cybersecurity incident could result in catastrophic effects. Lastly, DHS worked closely with the Department of Commerce in crafting recommendations to improve the resilience of the Internet of Things ecosystem and dramatically reduce the ever-growing botnet threat.

“As the world becomes more interconnected, it also becomes more difficult to secure, and our work pursuant to E.O. 13800 will help the Department confront this challenge. One of DHS’s core missions is to protect our nation against cyber threats and we are committed to achieving, with the help of our partners in the public and private sectors, a secure and resilient cyberspace.”

Source: DHS

The post DHS Secretary Nielsen issues cybersecurity statement appeared first on Intelligence Community News.

Securing our nation’s election infrastructure is a vital national interest that requires the commitment of our federal, state, and local partners. This is an issue that the Administration takes seriously and is addressing with urgency. That is why today we sought to enlist Congress’ help in working with state and local election officials back home to raise awareness of the potential threats and urge them to continue to use available resources, either from DHS, the FBI or a private, third party.

Following the threats to our democratic process in 2016, DHS, ODNI, and the FBI each prioritized our defined roles in working with state and local election officials to assist them in their threat understanding and risk management practices. In the face of a rapidly evolving threat environment, our collaborative efforts with those on the front lines of administering our elections at the state and local levels are critical to enhancing the security of our nation’s elections. Congress is one of our most critical partners in ensuring the success of this ongoing effort. Today’s briefing provided an opportunity to highlight our individual and collective efforts to protect this critical infrastructure.

There is a fundamental link between public trust in our election infrastructure and the confidence the American people place in basic democratic functions. With primaries already underway across the United States, and the general election less than six months away, it is critical—now more than ever—to safeguard and secure our election infrastructure. We are encouraged to see the level of engagement today and hope to continue this ongoing conversation about reducing risks and defending our electoral process.

Source: ODNI

The post IC leaders issue statement on election security briefing appeared first on Intelligence Community News.

Directed by the National Defense Authorization Act of 2017, this strategy addresses strategic and operational goals and priorities to successfully execute the full range of the DHS Secretary’s cybersecurity responsibilities. The intent is for this strategy to enable the harmonization and prioritization of DHS planning, programming, budgeting, and operational activities across all DHS cybersecurity mission areas. It will focus on coordinating departmental cybersecurity activities to ensure a unity of effort.

“The cyber threat landscape is shifting in real-time, and we have reached a historic turning point,” said DHS Secretary Kirstjen Nielsen. “Digital security is now converging with personal and physical security, and it is clear that our cyber adversaries can now threaten the very fabric of our republic itself. That is why DHS is rethinking its approach by adopting a more comprehensive cybersecurity strategy. In an age of brand-name breaches, we must think beyond the defense of specific assets—and confront systemic risks that affect everyone from tech giants to homeowners. Our strategy outlines how DHS will leverage its unique capabilities on the digital battlefield to defend American networks and get ahead of emerging cyber threats.”

The Department’s strategy sets forth a five-part approach to manage national cyber risk aimed at ensuring the availability of critical national functions and fostering efficiency, innovation, trustworthy communication, and economic prosperity in ways consistent with our national values and that protect privacy and civil liberties.

• Risk Identification:Assess the evolving national cybersecurity risk posture to inform and prioritize risk management activities.
• Vulnerability Reduction:Protect federal government information systems by reducing the vulnerabilities of federal agencies to ensure they achieve an adequate level of cybersecurity.
• Threat Reduction:Reduce national cyber threats by countering transnational criminal organizations and sophisticated cyber criminals.
• Consequence Mitigation:Respond effectively to cyber incidents to thereby minimize consequences from potentially significant cyber incidents through coordinated community-wide response efforts.
• Enable Cybersecurity Outcomes:Strengthen the security and reliability of the cyber ecosystem by supporting policies and activities that enable improved global cybersecurity risk management and execute departmental cybersecurity efforts in an integrated and prioritized way.

The goals and objectives set forth in this strategy are designed to ensure that DHS maximizes its unique resources to accomplish impactful policy and operational outcomes.  A core guiding principle underlying the DHS strategy approach is collaboration across the cybersecurity community, including with our partners in the federal government, state and local governments, industry, and the international community. By working closely with our partners, the Department believes that cyberspace can be made safe and secure enabling the functioning of government, the delivery of essential services, and the betterment of the lives of the American people.

Learn more about the strategy here.

Source: DHS

The post DHS unveils cybersecurity strategy appeared first on Intelligence Community News.

“I commend the House of Representatives for passing H.R. 3359. I urge the Senate to pass similar legislation. As the events of this morning illustrate, our nation’s critical infrastructure can often be prime targets for adversaries of all types, including terrorists, nation state and other non-state actors, hackers, and ordinary criminals. As the threat landscape shifts and becomes more complex, our approach to security must evolve.

“I want to personally thank Chairman McCaul for his tireless work to reach this important milestone in furtherance of the Department of Homeland Security’s mission. This legislation, which has bipartisan support, has been a priority of this Administration from day one. I look forward to continuing to work with Congress to move this important legislation forward.”

Source: DHS

The post DHS Secretary Nielsen issues statement on H.R. 3359 appeared first on Intelligence Community News.

The office consolidates key DHS functions and will lead the Department’s efforts to counter WMD threats. It will also allow for greater policy coordination and strategic planning, as well as provide greater visibility for this critically important mission.

“The United States faces rising danger from terrorist groups and rogue nation states who could use chemical, biological, radiological, and nuclear agents to harm Americans,” said Secretary Nielsen. “That’s why DHS is moving towards a more integrated approach, bringing together intelligence, operations, interagency engagement, and international action.  As terrorism evolves, we must stay ahead of the enemy and the establishment of this office is an important part of our efforts to do so.”

The United States faces a rising danger from threat actors who could use chemical, biological, radiological, and nuclear agents to harm Americans or U.S. interests.  Intelligence analysis shows terrorist groups are actively pursuing WMD capabilities, are using battlefield environments to test them, and may be working to incorporate these methods into external operations in ways we have not seen previously.  Certain weapons of mass destruction, once viewed as out-of-reach for all but nation states, are now closer to being attained by non-state actors.  A terrorist attack using such a weapon against the United States would have a profound and potentially catastrophic impact on our nation and the world.

The CWMD Office will be led by James McDonnell, who was appointed by President Trump in June 2017 to serve as the Director of the DHS Domestic Nuclear Detection Office (DNDO).

Source: DHS

The post DHS Secretary Nielsen announces the establishment of the Countering Weapons of Mass Destruction Office appeared first on Intelligence Community News.