6 USC 652: Cybersecurity and Infrastructure Security Agency

Agencies may request an extension for complying with any requirements issued pursuant to subsection of this section. Any such request shall be considered by the Director of OMB on a case-by-case basis, and only if accompanied by a plan for meeting the underlying requirements. The Director of OMB shall on a quarterly basis provide a report to the APNSA identifying and explaining all extensions granted. Heads of FCEB Agencies shall provide reports to the Secretary of Homeland Security through the Director of CISA, the Director of OMB, and the APNSA on their respective agency’s progress in adopting multifactor authentication and encryption of data at rest and in transit. Such agencies shall provide such reports every 60 days after the date of this order until the agency has fully adopted, agency-wide, multi-factor authentication and data encryption. The evaluation shall prioritize identification of the unclassified data considered by the agency to be the most sensitive and under the greatest threat, and appropriate processing and storage solutions for those data.

Your membership comes with resources like dark web monitoring, personal data removal, and backups. Our expert team will activate your devices with our suite of tools and customize Agency to your needs.

Developing agency strategic and operational cybersecurity plans required pursuant to this section. Identifying protection procedures to manage the protection of an agency’s information, data, and information technology resources. Using a standard risk assessment methodology that includes the identification of an agency’s priorities, constraints, risk tolerances, and assumptions Agency Cybersecurity necessary to support operational risk decisions. The NSA is always on the hunt for new cyber security talent, as digital communications and activity are central to its role. The agency monitors an incredible amount of information, much of which is transmitted in a digital manner. The goal is to prevent this sensitive or classified information from being used in nefarious ways.

CISA concurred with this recommendation and in March 2021 agency leadership issued a memorandum that directed several actions to transition transformation activities into operational tasks for implementation by CISA's divisions and mission support offices. However, as of July 2022, CISA had not yet provided documentation detailing how the remaining phase three tasks have been allocated to its divisions and mission support offices or how CISA leadership monitors the status of these tasks to ensure timely completion. Once CISA has provided information, we plan to verify whether implementation has occurred. While CISA intended to fully implement the transformation by December 2020, it had completed 37 of 94 planned tasks for phase three by mid-February 2021. Among the tasks not yet completed, 42 of them were past their most recent planned completion dates. Included in these 42 are the tasks of finalizing the mission-essential functions of CISA's divisions and issuing a memorandum defining incident management roles and responsibilities across CISA.

Department of Homeland Security The Director of CISA should collect input to ensure that organizational changes are aligned with the needs of stakeholders, taking into account coordination challenges identified in this report. Fully address each of the six reform practices that have been either partially or not addressed. CISA completed 2 of 3 phases in its organization plan, including defining an organizational structure. It also completed about a third of the tasks planned for the final phase by its December 2020 milestone.