DHS Cybersecurity and Infrastructure Security Agency

DHS Cybersecurity and Infrastructure Security Agency
Name	Cybersecurity and Infrastructure Security Agency
Formed	November 16, 2018
Preceding1	National Protection and Programs Directorate
Jurisdiction	United States
Headquarters	Washington, D.C.
Chief1 name	Director
Parent agency	Department of Homeland Security

DHS Cybersecurity and Infrastructure Security Agency The Cybersecurity and Infrastructure Security Agency was established as the federal focal point for safeguarding United States critical infrastructure, digital networks, and election systems. It operates at the nexus of United States Department of Homeland Security, federal law enforcement, intelligence community, state government, and private sector partners to manage risks from cyber incidents, physical threats, and complex hazards. The agency's role encompasses operational incident response, risk reduction, grants, and resilience planning across sectors such as energy, transportation, and communications.

Overview

The agency serves as the nation’s statutory operational lead for cyber and infrastructure protection under statutes enacted by the United States Congress, coordinating with entities such as Federal Bureau of Investigation, National Security Agency, Cybersecurity and Infrastructure Security Agency (CISA) — (see note: agency name not linked per constraints) — and Federal Emergency Management Agency on preparedness and response. It issues guidance aligned with standards from National Institute of Standards and Technology, partners with Electric Reliability Council of Texas, North American Electric Reliability Corporation, and interfaces with international bodies like North Atlantic Treaty Organization and European Union Agency for Cybersecurity. The agency provides threat warnings, vulnerability assessments, and workforce development programs connecting to institutions such as Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University.

History and Formation

The organization was created by the Cybersecurity and Infrastructure Security Agency Act of 2018, enacted by the 115th United States Congress and signed into law by Donald Trump as part of a legislative evolution from the National Protection and Programs Directorate of the Department of Homeland Security. Its predecessors included programs and offices developed after events such as the September 11 attacks, the 2013 Target data breach, and the 2016 United States elections hacking investigations, which drew collaboration among Office of Management and Budget, Congressional Research Service, and oversight bodies including the Government Accountability Office. Foundational leadership and staffing drew on talent from United States Secret Service, United States Cyber Command, National Cybersecurity Center, and state-level agencies such as New York State Division of Homeland Security and Emergency Services.

Mission and Responsibilities

Statutorily charged to reduce risk to critical infrastructure sectors designated by the Presidential Policy Directive 21, the agency’s responsibilities include cybersecurity, infrastructure protection, and resilience across sectors like Energy Sector (including Department of Energy systems), Transportation Security Administration domains, and Healthcare and Public Health Sector assets. It conducts threat hunting and incident response in coordination with Federal Bureau of Investigation, offers vulnerability disclosure and coordination policies reflecting standards from ISO/IEC, and administers grant programs funded through appropriations from United States Congress to state, local, tribal, and territorial governments. The agency also supports election infrastructure security in partnership with Cybersecurity Infrastructure Security Agency stakeholders such as Secretaries of State, local election officials, and nonprofit organizations like National Association of Secretaries of State.

Organizational Structure

Leadership comprises a Director appointed by the President of the United States and confirmed by the United States Senate, with deputy directors overseeing directorates modeled after operational divisions seen in Federal Emergency Management Agency and National Protection and Programs Directorate. Major components include cybersecurity operations, infrastructure security, stakeholder engagement, and mission support, collaborating with specialized units analogous to elements within United States Cyber Command, National Security Agency, and the Office of the Director of National Intelligence. Regional field offices coordinate with state governments, county governments, and municipal authorities, while liaison officers embed with partners including FBI Joint Terrorism Task Forces and Homeland Security Advisory Council working groups.

Programs and Initiatives

Signature efforts include real-time cyber threat alerts, the national risk-management framework adapted from National Institute of Standards and Technology guidance, and the Cybersecurity Advisors program resembling state-focused models like Washington State Fusion Center. The agency administers grant and technical assistance initiatives such as homeland security grant programs and resilience investments linked to Infrastructure Investment and Jobs Act funding streams. Public-facing campaigns include Cybersecurity Awareness Month collaboration with Department of Education and workforce initiatives with organizations like SANS Institute, (ISC)², and CompTIA. Operational services include vulnerability scanning, coordinated vulnerability disclosure, and the Joint Cyber Defense Collaborative patterned after interagency task forces such as those formed for high-profile incidents like the SolarWinds cyberattack.

Partnerships and Collaboration

Collaboration spans private-sector alliances with Microsoft, Google, Amazon Web Services, Cisco Systems, and AT&T, coordinated-defense efforts with financial sector utilities such as New York Stock Exchange partners, and international cooperation with Five Eyes partners including United Kingdom, Canada, Australia, and New Zealand. The agency convenes sector-specific councils mirroring models from National Infrastructure Advisory Council and engages academic research through partnerships with centers like Harvard Kennedy School and Stanford Cyber Policy Center. Joint exercises, tabletop simulations, and public-private information sharing follow frameworks like the Information Sharing and Analysis Center model and international agreements negotiated at forums such as the G7 and United Nations cyber discussions.

Criticisms and Controversies

Critiques have focused on resource allocation and statutory authority debates raised in hearings by the United States Senate Committee on Homeland Security and Governmental Affairs and the United States House Committee on Homeland Security, including scrutiny after incidents like the SolarWinds cyberattack and contentious reporting about election-related advisories during the 2020 United States presidential election. Civil liberties groups including American Civil Liberties Union and privacy advocates have questioned information-sharing practices, while industry stakeholders have debated the scope of regulatory influence versus voluntary frameworks championed by Chamber of Commerce and trade associations. Audits and oversight reports from the Government Accountability Office and inspector general reviews have prompted reforms in program management and performance metrics.

Category:United States federal agencies