Cybersecurity and Infrastructure Security Agency

Cybersecurity and Infrastructure Security Agency
Name	Cybersecurity and Infrastructure Security Agency
Formed	November 16, 2018
Preceding1	National Protection and Programs Directorate
Jurisdiction	United States Government
Headquarters	Arlington, Virginia
Chief1 name	Jen Easterly
Chief1 position	Director
Parent department	United States Department of Homeland Security

Cybersecurity and Infrastructure Security Agency. The Cybersecurity and Infrastructure Security Agency is a federal agency within the United States Department of Homeland Security responsible for enhancing the security and resilience of the nation's critical infrastructure. Established by the Cybersecurity and Infrastructure Security Agency Act of 2018, it serves as the national coordinator for cybersecurity and infrastructure protection efforts. The agency works to defend against threats from malware, ransomware, and other cyber attacks while partnering with entities across the public sector and private sector.

History and establishment

The agency was formally established on November 16, 2018, when President Donald Trump signed the Cybersecurity and Infrastructure Security Agency Act of 2018 into law. This legislation reorganized the former National Protection and Programs Directorate (NPPD) within the United States Department of Homeland Security into a distinct operational agency. The creation followed years of escalating cyber threats, including high-profile incidents like the 2016 Democratic National Committee email leak and attacks on critical systems such as the Ukrainian power grid. The move was championed by lawmakers including former Secretary of Homeland Security Kirstjen Nielsen and received bipartisan support in the United States Congress.

Organization and leadership

The agency is led by a Director, a position held since July 2021 by Jen Easterly, a former official with the National Security Agency and United States Army. The Director reports to the Secretary of Homeland Security and oversees several key components. These include the National Cybersecurity Division, the Infrastructure Security Division, and the Emergency Communications Division. Other notable offices within its structure are the National Risk Management Center and the Cybersecurity Advisory Committee. The agency's headquarters are located in Arlington, Virginia, with personnel deployed across the United States.

Mission and responsibilities

The core mission is to lead the national effort to understand, manage, and reduce risk to the critical infrastructure that supports American society. This encompasses a wide range of sectors including energy, transportation, financial services, and election security. Key responsibilities include providing cyber defense tools and services to federal agencies through initiatives like the Einstein program and the Continuous Diagnostics and Mitigation program. The agency also issues binding operational directives to other parts of the United States Government, such as those mandating patches for vulnerabilities like the Log4Shell exploit.

Key programs and initiatives

Among its flagship efforts is the Joint Cyber Defense Collaborative (JCDC), which coordinates defensive actions with partners like Microsoft, Google, and the Federal Bureau of Investigation. The agency operates the National Cybersecurity Protection System, commonly known as EINSTEIN, which monitors federal network traffic. It also runs the Shields Up campaign, launched in response to threats from Russia during the 2022 Russian invasion of Ukraine, to advise organizations on hardening defenses. Other significant programs include the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) and the .gov top-level domain registry.

Partnerships and collaboration

The agency operates through extensive collaboration with a vast array of domestic and international partners. Domestically, it works closely with other federal bodies like the Federal Bureau of Investigation, the National Security Agency, and the Department of Defense. It also engages with state, local, tribal, and territorial governments through organizations like the Multi-State Information Sharing and Analysis Center. In the private sector, it partners with critical infrastructure owners and operators, as well as technology firms such as Amazon Web Services and CrowdStrike. Internationally, it coordinates with allies through forums like NATO and the Five Eyes intelligence alliance.

Criticisms and controversies

The agency has faced scrutiny and criticism on several fronts. Some lawmakers and experts, including members of the United States Senate Committee on Homeland Security and Governmental Affairs, have questioned its effectiveness and speed in responding to major incidents like the SolarWinds cyber espionage campaign. Its role in election security has been a point of political contention, particularly following the 2020 United States presidential election. The agency has also been criticized for perceived overreach in its public-private partnerships and for challenges in information sharing with the private sector, as highlighted in reports by the Government Accountability Office.

Category:United States Department of Homeland Security agencies Category:Cybersecurity organizations