New and Timely Cyber Security Information

October is National Cyber Security Awareness Month.  With it, the DHS Private Sector Office has provided a number of resources to help organizations get involved in cyber security awareness.  These include weekly themes, such as Stop. Think. Connect., information on a weekly Twitter Chat series, and other information.

Perhaps released intentionally during National Cyber Security Awareness Month is the call for public comment on the National Cyber Incident Response Plan.  From their website, DHS’ National Protection and Programs Directorate and FEMA’s National Integration Center are leading the development of this document in coordination with the US Department of Justice, the Secretary of Defense, and other partners.  This plan is intended to provide a nation-wide approach to cyber incidents, incorporating roles for the private sector and all levels of government (TR – similar to the National Planning Frameworks, which this document rather heavily references).  The National Engagement Period ends on October 31, so be sure to review the document and provide feedback.  There are also a series of webinars referenced on the website.

In my initial and very cursory review of the plan, I was pleased to see the references to the National Preparedness Goal and National Planning Frameworks.  I’ve mentioned before that we need to strive to align and integrate all preparedness efforts along these lines and I’m thrilled to see it happening.  It’s even more encouraging to see this occurring with something that could be considered a bit fringe to traditional emergency management.  The plan directly references a number of Core Capabilities.  They take an interesting approach with this.  Instead of identifying which Core Capabilities the plan organizes under, they instead align certain Core Capabilities within what they call Lines of Effort.  These Lines of Effort include Threat Response, Asset Response, and Intelligence Support.  For each Core Capability they define the Core Capability, a la the National Preparedness Goal, and describe how that Core Capability applies to Line of Effort, along with listing associated critical tasks. (inserted is Table 2 from the plan which shows this alignment)

cyber-cc-by-loe

What I find even more interesting is the array of Core Capabilities they identified for their Lines of Effort.  While this plan is oriented toward response, the Core Capabilities they identify come from the Mission Areas of Prevention, Protection, Response, and Mitigation, along with including the three common Core Capabilities.  This further reinforces the thought that the Cyber Security Core Capability should also be included as a common Core Capability.  This is an interesting document which I look forward to reviewing in more detail.

© 2016 – Timothy Riecker, CEDP

Emergency Preparedness Solutions, LLCYour Partner in Preparedness

 

NIMS Alert – FEMA Seeks Feedback on Federal Interagency Operational Plans

Take some time to review and comment on these.  Be heard!  TR

<from press release>

FEMA is requesting stakeholder feedback on working drafts of four of the five Federal Interagency Operational Plans (FIOPs):  Protection, Mitigation, Response, and Recovery. The Prevention FIOP is Unclassified and For Official Use Only (FOUO)/Law Enforcement Sensitive (LES), Restricted Access and therefore available to appropriate personnel through separate and secure communication means. The FIOPs describe how the Federal government aligns resources and delivers core capabilities. Each FIOP outlines the concept of operations for integrating and synchronizing existing national-level Federal capabilities to support the whole community.

This update of the FIOPs focuses on discrete, critical content revisions, and confirming edits as a result of comments received on the National Preparedness Goal and National Planning Frameworks. Additional changes in the draft are the result of the lessons learned from implementing the FIOPs and recent events, as well as the findings of the National Preparedness Report.  The FIOPs and feedback submission forms may be found at http://www.fema.gov/ppd-8-news-updates-announcements.

To ensure all feedback is properly handled, reviewers are asked to use the provided feedback submission form to submit feedback and recommendations. Please provide any comments and recommendations, using the submission form, to PPD8-Engagement@fema.dhs.gov by Tuesday, September 2, 2015 at 5:00 PM EDT.

National Planning Frameworks: National Engagement Webinars

FEMA is hosting a series of 60-minute engagement webinars to discuss the update of the National Planning Frameworks. All webinars are open to the whole community, which encompasses—individuals (including those with disabilities and others with access and functional needs), businesses and nonprofits, faith-based and community groups, schools, and all levels of government. The sessions are scheduled for:

• Monday, May 18, 3:00 PM EDT
• Wednesday, May 20, 11:00 AM EDT
• Wednesday, May 27, 12:00 PM EDT
• Thursday, May 28, 10:30 AM EDT

Because each engagement webinar will cover the same information, please choose the session most convenient for you. Advance registration is required due to space limitations. Registration is on a first come, first serve basis. To register, please visit: https://www.vjpo.org/private/ppd8/events/frameworksupdate.

If you require accommodations to participate in these events, please provide details in the Disability Related Accommodations field on the registration page or contact us at PPD8-Engagement@fema.dhs.gov.

To review the draft National Planning Frameworks, please visit http://www.fema.gov/learn-about-presidential-policy-directive-8. To provide comments, please complete the feedback form and submit to PPD8-Engagement@fema.dhs.gov. Comments made during the webinars are considered to be for discussion purposes only and may not be adjudicated formally.

The National Planning Frameworks, which are part of the National Preparedness System, set the strategy and doctrine for building, sustaining, and delivering the core capabilities identified in the National Preparedness Goal. They describe the coordinating structures and alignment of key roles and responsibilities for the whole community and are integrated to ensure interoperability across all mission areas.

This update of the National Planning Frameworks focuses on discrete, critical content revisions, and confirming edits as a result of comments received on the National Preparedness Goal. Additional changes in the current draft of the Frameworks are the result of the lessons from implementing the Frameworks and recent events, as well as the findings of the National Preparedness Report.

Questions can be directed to FEMA’s NIC at: PPD8-Engagement@fema.dhs.gov.

For more information on national preparedness efforts, visit: http://www.fema.gov/national-preparedness.