National Infrastructure Advisory Council

National Infrastructure Advisory Council
Name	National Infrastructure Advisory Council
Abbreviation	NIAC
Formed	2001
Type	Advisory body
Headquarters	Washington, D.C.
Parent organization	United States Department of Homeland Security

National Infrastructure Advisory Council

The National Infrastructure Advisory Council was an advisory body chartered to provide the President of the United States and the Secretary of Homeland Security with expert advice on the security and resilience of critical infrastructure sectors including energy, transportation, telecommunications, financial services, and water supply and sanitation. Established in the aftermath of the September 11 attacks and influenced by policy debates around the Patriot Act, the council convened private-sector leaders, academic experts, and state government officials to address threats ranging from cyberattacks to natural disasters. Over its existence the council interfaced with entities such as the Federal Emergency Management Agency, National Security Council, Department of Defense, National Institute of Standards and Technology, and private corporations including Microsoft, General Electric, JPMorgan Chase, and AT&T.

History

The council was created in response to assessments made during the Clinton administration and formalized during the George W. Bush administration after the 9/11 Commission highlighted vulnerabilities in public-private coordination for critical infrastructure protection. Early work referenced frameworks from the Presidential Decision Directive 63 era and contemporary initiatives like the National Strategy for Homeland Security and the Critical Infrastructure Protection Board. Throughout the Obama administration, the council contributed to dialogues about the Cybersecurity National Action Plan and the Presidential Policy Directive 21 on critical infrastructure security and resilience. During the Trump administration and Biden administration the body’s charter, membership, and activity levels shifted in response to evolving priorities tied to events such as the Colonial Pipeline cyberattack and the SolarWinds breach.

Organization and Membership

Membership was drawn from leaders across sectors: corporate executives from ExxonMobil, Cisco Systems, Goldman Sachs; university faculty from Massachusetts Institute of Technology, Stanford University, Johns Hopkins University; state and local officials from New York (state), California, Texas; and former officials from agencies like the Central Intelligence Agency, Department of Energy, and Department of Transportation. Appointments were made by the Secretary of Homeland Security and often reflected intersections with advisory bodies such as the Homeland Security Advisory Council and interagency groups like the National Infrastructure Protection Plan working groups. The council operated with a chair and vice chair, supported by staff liaisons from DHS Office of Infrastructure Protection, and coordinated with standards bodies including ISO and the Institute of Electrical and Electronics Engineers.

Roles and Responsibilities

The council’s charter specified roles including advising on sector resilience strategies, risk assessment methodologies, public-private partnership models, and recovery planning after incidents such as Hurricane Katrina, Hurricane Sandy, and regional blackouts like the Northeast blackout of 2003. It developed guidance on cyber risk management referencing frameworks like the NIST Cybersecurity Framework and engaged in scenario planning involving threats from actors such as Russian cyber operations, Chinese cyber espionage, and transnational criminal organizations exemplified by cases involving WannaCry and NotPetya. The NIAC also provided recommendations on supply chain security issues tied to suppliers like Huawei and Kaspersky Lab and on infrastructure interdependencies analyzed in studies similar to those by the National Academies of Sciences, Engineering, and Medicine.

Reports and Recommendations

The council produced reports addressing resilience, risk management, and public-private coordination, often aligning with recommendations from the 9/11 Commission Report and lessons from the National Infrastructure Protection Plan. Topics included risk metrics, sector-specific resilience for electric power grid modernization, financial sector continuity planning after events like the 2008 financial crisis, and resilience of healthcare infrastructure during pandemics such as COVID-19 pandemic. Reports frequently referenced standards and guidance from NIST, Federal Energy Regulatory Commission, Securities and Exchange Commission, and international frameworks like the European Programme for Critical Infrastructure Protection (EPCIP).

Notable Activities and Impact

The council convened workshops and produced actionable guidance that influenced policy instruments such as the Presidential Policy Directive 21 and contributed to sector partnership models used by Sector Coordinating Councils and Information Sharing and Analysis Centers. NIAC recommendations helped shape resiliency investments in the electric power grid that intersected with projects funded by the Department of Energy and influenced corporate continuity planning at firms like Amazon and Wells Fargo. The council’s emphasis on cyber supply chain risk informed procurement policies at agencies such as the General Services Administration and legislative proposals debated in the United States Congress.

Controversies and Criticism

The council faced criticism over perceived industry influence, with commentators citing close ties to firms represented by members and raising concerns similar to debates involving the revolving door and controversies around advisory boards such as the Homeland Security Advisory Council and Advisory Committee on Immunization Practices. Critics argued NIAC recommendations sometimes favored privatized resilience investments over public-sector solutions, echoing disputes in debates around privatization of infrastructure assets and proposals for public-private partnerships in projects like Public–private partnership in transportation. Questions about transparency and Freedom of Information Act litigation paralleled disputes involving White House advisory groups and generated comparisons to scrutiny faced by commissions such as the 9/11 Commission.

Category:United States national security