856 lines
93 KiB
Text
856 lines
93 KiB
Text
|
<!DOCTYPE html>
|
|||
|
|
<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">
|
|||
|
|
<head>
|
|||
|
|
<meta charset="utf-8" /><script type="text/javascript">(window.NREUM||(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM||(NREUM={})).loader_config={licenseKey:"37b7ccb661",applicationID:"1089704227"};;/*! For license information please see nr-loader-rum-1.283.2.min.js.LICENSE.txt */
|
|||
|
|
(()=>{var e,t,r={122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e||"object"!=typeof e)return(0,n.R)(3);if(!t||"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),o=0===Object.keys(r).length?e:r;for(let a in o)if(void 0!==e[a])try{if(null===e[a]){r[a]=null;continue}Array.isArray(e[a])&&Array.isArray(t[a])?r[a]=Array.from(new Set([...e[a],...t[a]])):"object"==typeof e[a]&&"object"==typeof t[a]?r[a]=i(e[a],t[a]):r[a]=e[a]}catch(e){(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},555:(e,t,r)=>{"use strict";r.d(t,{Vp:()=>c,fn:()=>s,x1:()=>u});var n=r(384),i=r(122);const o={beacon:n.NT.beacon,errorBeacon:n.NT.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function u(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.a)(t,o);const r=(0,n.nY)(e);r&&(r.info=a[e])}},217:(e,t,r)=>{"use strict";r.d(t,{D0:()=>m,gD:()=>v,xN:()=>h});r(860).K7.genericEvents;const n="experimental.marks",i="experimental.measures",o="experimental.resources",a=e=>{if(!e||"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var s=r(614),c=r(944),u=r(384),l=r(122);const d="[data-nr-mask]",f=()=>{const e={feature_flags:[],experimental:{marks:!1,measures:!1,resources:!1},mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},get feature_flags(){return e.feature_flags},set feature_flags(t){e.feature_flags=t},generic_events:{enabled:!0,autoStart:!0},harvest:{interval:30},jserrors:{enabled:!0,autoStart:!0},logging:{enabled:!0,autoStart:!0},metrics:{enabled:!0,autoStart:!0},obfuscate:void 0,page_action:{enabled:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,autoStart:!0},performance:{get capture_marks(){return e.feature_flags.includes(n)||e.experimental.marks},set capture_marks(t){e.experimental.marks=t},get capture_measures(){return e.feature_flags.includes(i)||e.experimental.measures},set capture_measures(t){e.experimental.measures=t},capture_detail:!0,resources:{get enabled(){return e.feature_flags.includes(o)||e.experimental.resources},set enabled(t){e.experimental.resources=t},asset_types:[],first_party_domains:[],ignore_newrelic:!0}},privacy:{cookies_enabled:!0},proxy:{assets:void 0,beacon:void 0},session:{expiresMs:s.wk,inactiveMs:s.BB},session_replay:{autoStart:!0,enabled:!1,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_selector},set mask_text_selector(t){a(t)?e.mask_selector="".concat(t,",").concat(d):""===t||null===t?e.mask_selector=d:(0,c.R)(5,t)},get block_class(){return"nr-block"},get ignore_class(){return"nr-ignore"},get mask_text_class(){return"nr-mask"},get block_selector(){return e.block_selector},set block_selector(t){a(t)?e.block_selector+=",".concat(t):""!==t&&(0,c.R)(6,t)},get mask_input_options(){return e.mask_input_options},set mask_input_options(t){t&&"object"==typeof t?e.mask_input_options={...t,password:!0}:(0,c.R)(7,t)}},session_trace:{enabled:!0,autoStart:!0},soft_navigations:{enabled:!0,autoStart:!0},spa:{enabled:!0,autoStart:!0
|
|||
|
|
<noscript><style>form.antibot * :not(.antibot-message) { display: none !important; }</style>
|
|||
|
|
</noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-HEQ0YF2VYL"></script>
|
|||
|
|
<script>window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments)};gtag("js", new Date());gtag("set", "developer_id.dMDhkMT", true);gtag('set', {'cookie_flags': 'SameSite=None;Secure', 'cookie_domain': 'www.nist.gov'});gtag("config", "G-HEQ0YF2VYL", {"groups":"default","page_placeholder":"PLACEHOLDER_page_location","link_attribution":true,"allow_ad_personalization_signals":false});gtag("config", "G-CSLL4ZEK4L", {"groups":"default","page_placeholder":"PLACEHOLDER_page_location","link_attribution":true,"allow_ad_personalization_signals":false});gtag("event", "custom", {"node_title":"Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation\u2019s Critical Infrastructure","node_id":"1128326","content_type":"Speeches\/Testimony"});</script>
|
|||
|
|
<meta name="description" content="IntroductionChairman Carper, Ranking Member Coburn and Members of the Committee, I am Donna F" />
|
|||
|
|
<link rel="canonical" href="https://www.nist.gov/speech-testimony/strengthening-public-private-partnerships-reduce-cyber-risks-our-nations-critical" />
|
|||
|
|
<link rel="shortlink" href="https://www.nist.gov/node/1128326" />
|
|||
|
|
<meta name="citation_title" content="Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure | NIST" />
|
|||
|
|
<meta property="og:site_name" content="NIST" />
|
|||
|
|
<meta property="og:type" content="Article" />
|
|||
|
|
<meta property="og:url" content="https://www.nist.gov/speech-testimony/strengthening-public-private-partnerships-reduce-cyber-risks-our-nations-critical" />
|
|||
|
|
<meta property="og:title" content="Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure" />
|
|||
|
|
<meta property="og:description" content="IntroductionChairman Carper, Ranking Member Coburn and Members of the Committee, I am Donna F" />
|
|||
|
|
<meta property="og:image" content="https://www.nist.gov/themes/custom/nist_www/img/homepage/nist_mark.png" />
|
|||
|
|
<meta property="article:published_time" content="2014-03-26T08:00-04:00" />
|
|||
|
|
<meta property="article:modified_time" content="2019-11-15T02:50-05:00" />
|
|||
|
|
<meta name="dcterms.title" content="Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure" />
|
|||
|
|
<meta name="dcterms.description" content="IntroductionChairman Carper, Ranking Member Coburn and Members of the Committee, I am Donna F" />
|
|||
|
|
<meta name="dcterms.date" content="2014-03-26T08:00-04:00" />
|
|||
|
|
<meta name="dcterms.type" content="text" />
|
|||
|
|
<meta name="dcterms.format" content="text/html" />
|
|||
|
|
<meta name="dcterms.identifier" content="https://www.nist.gov/speech-testimony/strengthening-public-private-partnerships-reduce-cyber-risks-our-nations-critical" />
|
|||
|
|
<meta name="dcterms.source" content="NIST" />
|
|||
|
|
<meta name="dcterms.created" content="2014-03-26T08:00-04:00" />
|
|||
|
|
<meta name="dcterms.modified" content="2019-11-15T02:50-05:00" />
|
|||
|
|
<meta name="twitter:card" content="summary_large_image" />
|
|||
|
|
<meta name="twitter:description" content="IntroductionChairman Carper, Ranking Member Coburn and Members of the Committee, I am Donna F" />
|
|||
|
|
<meta name="twitter:site" content="NIST" />
|
|||
|
|
<meta name="twitter:title" content="Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure" />
|
|||
|
|
<meta name="google-site-verification" content="QMu0ODkER3rN5hLcMLqNVf7e3bkjYsNLTuhqfH48jCA" />
|
|||
|
|
<meta name="Generator" content="Drupal 10 (https://www.drupal.org)" />
|
|||
|
|
<meta name="MobileOptimized" content="width" />
|
|||
|
|
<meta name="HandheldFriendly" content="true" />
|
|||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|||
|
|
<meta name="nist_search_modified" class="elastic" content="2019-11-15T02:50:00-05:00" />
|
|||
|
|
<meta name="nist_search_bundle" class="elastic" content="speeches_testimony" />
|
|||
|
|
<link rel="icon" href="/themes/custom/nist_www/favicon.ico" type="image/vnd.microsoft.icon" />
|
|||
|
|
|
|||
|
|
<title>Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure | NIST</title>
|
|||
|
|
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_CoYW9o5iASDZ0KVzyq3-Gk0ZT4uXg3o43bmDru7Se_8.css?delta=0&language=en&theme=nist_www&include=eJxFi1EKwzAMQy9UliMZOzGdqROX2CPb7Zd2KwV9SOI9wrxB2Mye6O4g2drSxAPiyZXnZ0rYoVpJRRxJGVTatvjHg-t0nU8-rWqE-nPHGNfmdxx8Kv21oz7-88aq5G4uwV-XkjnN" />
|
|||
|
|
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_kGS0ApDpFo-_3JI4Ijxg4RCWlTqsImK3lqH7bCv5v2U.css?delta=1&language=en&theme=nist_www&include=eJxFi1EKwzAMQy9UliMZOzGdqROX2CPb7Zd2KwV9SOI9wrxB2Mye6O4g2drSxAPiyZXnZ0rYoVpJRRxJGVTatvjHg-t0nU8-rWqE-nPHGNfmdxx8Kv21oz7-88aq5G4uwV-XkjnN" />
|
|||
|
|
<link rel="stylesheet" media="print" href="/sites/default/files/css/css_-IXwLuTUdm8IGHxib8GX8wWKw3LjKsNWSYYskZ5fEGg.css?delta=2&language=en&theme=nist_www&include=eJxFi1EKwzAMQy9UliMZOzGdqROX2CPb7Zd2KwV9SOI9wrxB2Mye6O4g2drSxAPiyZXnZ0rYoVpJRRxJGVTatvjHg-t0nU8-rWqE-nPHGNfmdxx8Kv21oz7-88aq5G4uwV-XkjnN" />
|
|||
|
|
<link rel="stylesheet" media="all" href="/sites/default/files/css/css_jmXeSZNqhh6ayjrVIlS8rDw3mcnQaE5dzE2ZwwPSzNA.css?delta=3&language=en&theme=nist_www&include=eJxFi1EKwzAMQy9UliMZOzGdqROX2CPb7Zd2KwV9SOI9wrxB2Mye6O4g2drSxAPiyZXnZ0rYoVpJRRxJGVTatvjHg-t0nU8-rWqE-nPHGNfmdxx8Kv21oz7-88aq5G4uwV-XkjnN" />
|
|||
|
|
|
|||
|
|
<script src="/sites/default/files/js/js_GM8kl6wk698qKTTwusj83bCoGHHtOZ1UinjY1sE_Qbk.js?scope=header&delta=0&language=en&theme=nist_www&include=eJxdjW0OwjAIhi805UiErtjhWFlatHp7O53RLOEHPLwfgcYZ3fqsEH47XuuQzJIyUiZ9uowVjmDIUh0v0lm0ltUoopceIjlBos-7irMsa7E7wxFsLW_mEy_ce00DFVwsQpRKoQer5PmtgaQWSE-7BSamyOV7YmvtT8EP34wQy20lPe_nC6DrXYU"></script>
|
|||
|
|
|
|||
|
|
</head>
|
|||
|
|
<body class="node-1128326">
|
|||
|
|
<a href="#main-content" class="visually-hidden focusable" data-elastic-exclude>
|
|||
|
|
Skip to main content
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas>
|
|||
|
|
|
|||
|
|
<!-- nist-index-ignore-start -->
|
|||
|
|
<section data-elastic-exclude class="usa-banner" aria-label="Official government website">
|
|||
|
|
<div class="usa-accordion">
|
|||
|
|
<header class="usa-banner__header">
|
|||
|
|
<div class="usa-banner__inner">
|
|||
|
|
<div class="grid-col-auto">
|
|||
|
|
<img class="usa-banner__header-flag" src="/libraries/nist-component-library/dist/img/us_flag_small.png" alt="U.S. flag">
|
|||
|
|
</div>
|
|||
|
|
<div class="grid-col-fill tablet:grid-col-auto">
|
|||
|
|
<p class="usa-banner__header-text">An official website of the United States government</p>
|
|||
|
|
<p class="usa-banner__header-action" aria-hidden="true">Here’s how you know</p>
|
|||
|
|
</div>
|
|||
|
|
<button class="usa-accordion__button usa-banner__button" aria-expanded="false" aria-controls="gov-banner-default">
|
|||
|
|
<span class="usa-banner__button-text">Here’s how you know</span>
|
|||
|
|
</button>
|
|||
|
|
</div>
|
|||
|
|
</header>
|
|||
|
|
<div class="usa-banner__content usa-accordion__content" id="gov-banner-default">
|
|||
|
|
<div class="grid-row grid-gap-lg">
|
|||
|
|
<div class="usa-banner__guidance tablet:grid-col-6">
|
|||
|
|
<img class="usa-banner__icon usa-media-block__img" src="/libraries/nist-component-library/dist/img/icon-dot-gov.svg" role="img" alt="" aria-hidden="true">
|
|||
|
|
<div class="usa-media-block__body">
|
|||
|
|
<p>
|
|||
|
|
<strong>Official websites use .gov</strong>
|
|||
|
|
<br/>
|
|||
|
|
A <strong>.gov</strong> website belongs to an official government organization in the United States.
|
|||
|
|
</p>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<div class="usa-banner__guidance tablet:grid-col-6">
|
|||
|
|
<img class="usa-banner__icon usa-media-block__img" src="/libraries/nist-component-library/dist/img/icon-https.svg" role="img" alt="" aria-hidden="true">
|
|||
|
|
<div class="usa-media-block__body">
|
|||
|
|
<p>
|
|||
|
|
<strong>Secure .gov websites use HTTPS</strong>
|
|||
|
|
<br/>
|
|||
|
|
A <strong>lock</strong> ( <span class="icon-lock">
|
|||
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewbox="0 0 52 64" class="usa-banner__lock-image" role="img" aria-labelledby="banner-lock-title banner-lock-description" focusable="false">
|
|||
|
|
<title id="banner-lock-title">Lock</title>
|
|||
|
|
<desc id="banner-lock-description">A locked padlock</desc><path fill="#000000" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg>
|
|||
|
|
</span>
|
|||
|
|
) or <strong>https://</strong> means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
|
|||
|
|
</p>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</section>
|
|||
|
|
<!-- nist-index-ignore-end -->
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div data-elastic-exclude>
|
|||
|
|
<!-- nist-index-ignore-start -->
|
|||
|
|
<div class="nist-print-header" style="display:none;">
|
|||
|
|
<p class="nist-print-header__url">https://www.nist.gov/speech-testimony/strengthening-public-private-partnerships-reduce-cyber-risks-our-nations-critical</p>
|
|||
|
|
<img class="nist-print-header__logo" width="289" height="38" src="/libraries/nist-component-library/dist/img/logo/nist_logo_sidestack.svg" alt="National Institute of Standards and Technology" />
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="usa-overlay"></div>
|
|||
|
|
<header class="usa-header nist-header--www nist-header--minimal" role="banner">
|
|||
|
|
<div class="usa-navbar">
|
|||
|
|
<div class="usa-logo flex-fill">
|
|||
|
|
<a href="/" title="National Institute of Standards and Technology" aria-label="Home">
|
|||
|
|
<img src="/libraries/nist-component-library/dist/img/logo/logo.svg" alt="National Institute of Standards and Technology" width="300px" height="80px" />
|
|||
|
|
</a>
|
|||
|
|
</div>
|
|||
|
|
<div class="usa-header__right grid-row flex-auto">
|
|||
|
|
<div class="grid-col-fill nist-header__search-group">
|
|||
|
|
|
|||
|
|
<form class="usa-search usa-search--small"
|
|||
|
|
accept-charset="UTF-8"
|
|||
|
|
action="/search"
|
|||
|
|
id="search_form"
|
|||
|
|
method="get">
|
|||
|
|
<div role="search">
|
|||
|
|
<label class="usa-sr-only" for="search-form">Search NIST</label>
|
|||
|
|
<input class="usa-input" id="search-form" type="search" name="s" placeholder="Search NIST" required="" maxlength="128">
|
|||
|
|
<button class="usa-button" type="submit"><img src="/libraries/nist-component-library/dist/img/usa-icons-bg/search--white.svg" class="usa-search__submit-icon" alt="Search"></button>
|
|||
|
|
</div>
|
|||
|
|
</form>
|
|||
|
|
</div>
|
|||
|
|
<div class="grid-col-auto padding-left-1">
|
|||
|
|
<button class="usa-menu-btn">Menu</button>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<nav aria-label="Primary navigation" class="usa-nav">
|
|||
|
|
<div class="usa-nav__inner">
|
|||
|
|
<button class="usa-nav__close">Close</button>
|
|||
|
|
<ul class="usa-nav__primary usa-accordion">
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<a class="usa-nav__link" href="/publications">Publications</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<button class="usa-accordion__button usa-nav__link" aria-expanded="false" aria-controls="primary_menu-2"><span>What We Do</span></button>
|
|||
|
|
<div id="primary_menu-2" class="usa-nav__submenu usa-megamenu">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/topics" class="usa-nav__link">All Topics</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/advanced-communications" class="usa-nav__link">Advanced communications</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/artificial-intelligence" class="usa-nav__link">Artificial intelligence</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/bioscience" class="usa-nav__link">Bioscience</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/buildings-construction" class="usa-nav__link">Buildings and construction</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/chemistry" class="usa-nav__link">Chemistry</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/cybersecurity" class="usa-nav__link">Cybersecurity</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/electronics" class="usa-nav__link">Electronics</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/energy" class="usa-nav__link">Energy</a>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/environment" class="usa-nav__link">Environment</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/fire" class="usa-nav__link">Fire</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/forensic-science" class="usa-nav__link">Forensic science</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/health" class="usa-nav__link">Health</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/information-technology" class="usa-nav__link">Information technology</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/infrastructure" class="usa-nav__link">Infrastructure</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/manufacturing" class="usa-nav__link">Manufacturing</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/materials" class="usa-nav__link">Materials</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/mathematics-statistics" class="usa-nav__link">Mathematics and statistics</a>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/metrology" class="usa-nav__link">Metrology</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/nanotechnology" class="usa-nav__link">Nanotechnology</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/neutron-research" class="usa-nav__link">Neutron research</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/performance-excellence" class="usa-nav__link">Performance excellence</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/physics" class="usa-nav__link">Physics</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/public-safety" class="usa-nav__link">Public safety</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/quantum-information-science" class="usa-nav__link">Quantum information science</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/resilience" class="usa-nav__link">Resilience</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/standards" class="usa-nav__link">Standards</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/transportation" class="usa-nav__link">Transportation</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<button class="usa-accordion__button usa-nav__link" aria-expanded="false" aria-controls="primary_menu-3"><span>Labs & Major Programs</span></button>
|
|||
|
|
<div id="primary_menu-3" class="usa-nav__submenu usa-megamenu">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/adlp" class="usa-nav__link">Assoc Director of Laboratory Programs</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/laboratories" class="usa-nav__link">Laboratories</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/ctl" class="usa-nav__link">Communications Technology Laboratory</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/el" class="usa-nav__link">Engineering Laboratory</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/itl" class="usa-nav__link">Information Technology Laboratory</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/mml" class="usa-nav__link">Material Measurement Laboratory</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/pml" class="usa-nav__link">Physical Measurement Laboratory</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/user-facilities" class="usa-nav__link">User Facilities</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/ncnr" class="usa-nav__link">NIST Center for Neutron Research</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/cnst" class="usa-nav__link">CNST NanoFab</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/labs-major-programs/research-test-beds" class="usa-nav__link">Research Test Beds</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/laboratories/projects-programs" class="usa-nav__link">Research Projects</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/laboratories/tools-instruments" class="usa-nav__link">Tools & Instruments</a>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/major-programs" class="usa-nav__link">Major Programs</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/baldrige" class="usa-nav__link">Baldrige Performance Excellence Program</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/chips" class="usa-nav__link">CHIPS for America Initiative</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/mep" class="usa-nav__link">Manufacturing Extension Partnership (MEP)</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/oam" class="usa-nav__link">Office of Advanced Manufacturing</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/spo" class="usa-nav__link">Special Programs Office</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/tpo" class="usa-nav__link">Technology Partnerships Office</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<button class="usa-accordion__button usa-nav__link" aria-expanded="false" aria-controls="primary_menu-4"><span>Services & Resources</span></button>
|
|||
|
|
<div id="primary_menu-4" class="usa-nav__submenu usa-megamenu">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/content/standards-measurements" class="usa-nav__link">Standards and Measurements</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/calibrations" class="usa-nav__link">Calibration Services</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/nvlap" class="usa-nav__link">Laboratory Accreditation (NVLAP)</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/nist-quality-system" class="usa-nav__link">Quality System</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/srm" class="usa-nav__link">Standard Reference Materials (SRMs)</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/sri" class="usa-nav__link">Standard Reference Instruments (SRIs)</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/standardsgov" class="usa-nav__link">Standards.gov</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/pml/time-and-frequency-division/time-services" class="usa-nav__link">Time Services</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/pml/owm" class="usa-nav__link">Office of Weights and Measures</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/services-resources/software" class="usa-nav__link">Software</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/data" class="usa-nav__link">Data</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="https://webbook.nist.gov/chemistry/" class="usa-nav__link">Chemistry WebBook</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="https://nvd.nist.gov/" class="usa-nav__link">National Vulnerability Database</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/pml/productsservices/physical-reference-data" class="usa-nav__link">Physical Reference Data</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/srd" class="usa-nav__link">Standard Reference Data (SRD)</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="https://shop.nist.gov/" class="usa-nav__link">Storefront</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/tpo" class="usa-nav__link">License & Patents</a>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="https://csrc.nist.gov/" class="usa-nav__link">Computer Security Resource Center (CSRC)</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/nist-research-library" class="usa-nav__link">NIST Research Library</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<button class="usa-accordion__button usa-nav__link" aria-expanded="false" aria-controls="primary_menu-5"><span>News & Events</span></button>
|
|||
|
|
<div id="primary_menu-5" class="usa-nav__submenu usa-megamenu">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/news-events/news" class="usa-nav__link">News</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/news-events/events" class="usa-nav__link">Events</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/blogs" class="usa-nav__link">Blogs</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/feature-stories" class="usa-nav__link">Feature Stories</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/awards" class="usa-nav__link">Awards</a>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/video-gallery" class="usa-nav__link">Video Gallery</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/image-gallery" class="usa-nav__link">Image Gallery</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/pao/media-contacts" class="usa-nav__link">Media Contacts</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__primary-item">
|
|||
|
|
<button class="usa-accordion__button usa-nav__link" aria-expanded="false" aria-controls="primary_menu-6"><span>About NIST</span></button>
|
|||
|
|
<div id="primary_menu-6" class="usa-nav__submenu usa-megamenu">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/about-nist" class="usa-nav__link">About Us</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/director/leadership" class="usa-nav__link">Leadership</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/director/nist-organization-structure" class="usa-nav__link">Organization Structure</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/about-nist/budget-planning" class="usa-nav__link">Budget & Planning</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/about-nist/contact-us" class="usa-nav__link">Contact Us</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/about-nist/visit" class="usa-nav__link">Visit</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/careers" class="usa-nav__link">Careers</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="/iaao/academic-affairs-office" class="usa-nav__link">Student programs</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
</ul></div><div class="column-break tablet:grid-col-fill"><ul class="usa-nav__submenu-list">
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/about-nist/work-nist" class="usa-nav__link">Work with NIST</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/history" class="usa-nav__link">History</a>
|
|||
|
|
<ul class="usa-nav__submenu-list">
|
|||
|
|
<li>
|
|||
|
|
<a href="http://nistdigitalarchives.contentdm.oclc.org/" class="usa-nav__link">NIST Digital Archives</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/nist-museum" class="usa-nav__link">NIST Museum</a>
|
|||
|
|
</li>
|
|||
|
|
<li>
|
|||
|
|
<a href="/nist-and-nobel" class="usa-nav__link">NIST and the Nobel</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</li>
|
|||
|
|
<li class="usa-nav__submenu-item">
|
|||
|
|
<a href="/education" class="usa-nav__link">Educational Resources</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</nav>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</header>
|
|||
|
|
<!-- nist-index-ignore-end -->
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="grid-container">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
id="block-nist-www-content" class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<section
|
|||
|
|
class="nist-page__content usa-section clearfix"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<a id="main-content" tabindex="-1"></a>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="grid-container margin-top-4">
|
|||
|
|
<div
|
|||
|
|
class="nist-page__region nist-page__region--content-top"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<a class="usa-button usa-button--accent-cool" href="/director/congressional-and-legislative-affairs/testimony">TESTIMONY</a>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<h1 class="nist-page__title">Strengthening Public-Private Partnerships to Reduce Cyber Risks to Our Nation’s Critical Infrastructure</h1>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="datetime"><time datetime="2014-03-26T12:00:00Z">March 26, 2014</time>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="grid-container margin-top-4">
|
|||
|
|
<div class="grid-row grid-gap-6">
|
|||
|
|
|
|||
|
|
|
|||
|
|
<aside class="nist-page__region nist-page__region--sidebar-second-top-mobile grid-col-12">
|
|||
|
|
<div class="gray-box">
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<h2 class="nist-block__title">Witness</h2>
|
|||
|
|
<p>Donna F. Dodson<br>Chief Cybersecurity Advisor, National Institute of Standards and Technology<br>United States Department of Commerce</p>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<h2
|
|||
|
|
class="nist-block__title"
|
|||
|
|
>Venue</h2>
|
|||
|
|
|
|||
|
|
<div class="text-long"><p>United States Senate<br>Committee on Homeland Security and Governmental Affairs</p></div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</aside>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-page__region nist-page__region--content tablet-lg:grid-col-8"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="text-with-summary">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<h3>Introduction</h3><p>Chairman Carper, Ranking Member Coburn and Members of the Committee, I am Donna F. Dodson, the Chief Cybersecurity Advisor working in the Information Technology Laboratory (ITL) in the Department of Commerce’s National Institute of Standards and Technology (NIST). Thank you for this opportunity to testify today on NIST’s responsibilities under Executive Order 13636, “Improving Critical Infrastructure Cybersecurity” and our work through public-private partnerships in the area of cybersecurity.</p><h3>Background</h3><p>Let me begin with a few words on NIST itself: NIST’s mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. Our work in addressing technical challenges related to national priorities has ranged from projects in the smart grid and electronic health records to atomic clocks, advanced nanomaterials, and computer chips.</p><p>In cybersecurity, we have worked with federal agencies, industry, and academia dating back to the mid-1970s to research, develop and deploy information security standards and technology to protect information systems against threats to the confidentiality, integrity and availability of information and services. Consistent with this mission, NIST actively engages with private industry, academia, non-national security federal departments and agencies, the intelligence community, and other elements of the law enforcement and national security communities.</p><p>Our broader work in the areas of information security, trusted networks, and software quality is applicable to a wide variety of users, from small and medium enterprises to large private and public organizations including agencies of the federal government and critical infrastructure companies.</p><h3>The Role of NIST in Executive Order 13636</h3><p>NIST has spent the last year working to convene Critical Infrastructure sectors to build a Cybersecurity Framework as part of Executive Order 13636. Version 1.0 of the Framework was released on February 12, 2014, along with a Roadmap for future NIST work in support of this effort.</p><p>The Executive Order asked NIST to develop a Framework—a collection of industry standards, process, and best practices—that could be leveraged more broadly to help companies manage their cybersecurity risk. NIST’s approach was to work with stakeholders to develop a structure that any organization, large or small, in any one of the varied critical infrastructure sectors can use to begin, or make improvements to, their current cybersecurity programs. The Framework offers a common language to address and manage cyber risks in a cost-effective way based on business needs without placing additional compliance obligations on businesses.</p><p>We found that the voluntary nature of the Framework has encouraged the widest set of stakeholders to come to the table and work collaboratively. This approach, with its reliance on voluntary standards, is already consistent with U.S. policy and business use because they have proven to work. Time and time again, when industries get together and determine for themselves what standards describe a quality product, those standards are much more likely to be adopted quickly and to be fully implemented.</p><p>I would like to make one other key point. The Framework was designed with the nation’s critical infrastructure in mind. But it also can be used by any organization, regardless of its role in society. The broader the effective use of the Framework and its underlying capabilities, the greater the likelihood that our Nation’s infrastructure will be secure.</p><h3>Framework Development Process</h3><p>Going back to the title of the hearing, I would like to talk about the public-private partnership that the Administration used to develop the Framework. NIST began the process with a Request for Information and received hundreds of submissions from stakeholders in industry, acad
|
|||
|
|
|
|||
|
|
<img loading="lazy" src="/sites/default/files/styles/960_x_960_limit/public/images/2016/12/13/framework_respond_graphic.jpg?itok=dsMHW-_3" width="960" height="385" alt="graphic from the NIST Cyber Framework" typeof="foaf:Image">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<p class="text-align-center"><em>Figure 1: Example from the Framework Core</em></p><p>Framework Implementation Tiers then provide context on how an organization views cybersecurity risk and the processes in place to manage that risk. During the Tier selection process, an organization will consider its current risk management practices, threat environment, legal and regulatory requirements, business/mission objectives, and organizational constraints. These Tiers reflect a progression from informal, reactive implementations to approaches that are agile and threat-informed.</p><p>A Framework Profile represents the outcomes that an organization has selected from the Framework Categories and Subcategories. The Profile can be characterized as the alignment of standards, guidelines, and practices to the Framework Core in a particular implementation scenario. Most importantly, profiles can be used to identify opportunities for improving cybersecurity posture by comparing a “Current” Profile (the “as is” state) with a “Target” Profile (the desired state). Organizations can use that information to develop action plans to strengthen existing cybersecurity practices and reduce cybersecurity risk. Organizations may also find that they are overinvesting to achieve certain outcomes and can reprioritize resources to strengthen other cybersecurity practices.</p><p>As part of the ongoing work, we believe that organizations will draft sample profiles to illustrate sector-specific needs and requirements—including regulatory and legal obligations.</p><p>It is also important to note that the Framework offers guidance regarding privacy and civil liberties considerations that may result from cybersecurity operations. While processes and existing requirements will differ, the Framework can assist organizations in considering privacy and civil liberties as part of a comprehensive cybersecurity program—highlighting risks to privacy and civil liberties that can emerge when developing such a program and helping to mitigate them.</p><p>Together we think this structure will enable organizations to improve their practices. By mapping their individual cybersecurity programs against the full list of cybersecurity functions, categories, and specific standards, companies can identify gaps and tailor improvement plans to their specific needs. They can then create internal metrics to track and document those improvements. Some companies may discover in the process that their entire cybersecurity effort consists only of passwords and antivirus software with no real-time detection capability even though automated tools are widely available and affordable. Other companies may find the Framework a useful tool for holding their suppliers accountable or for purchasing these services in a more systematic way.</p><p>The bottom line is that we believe the Framework can provide an agreed-upon way to talk clearly to one another about cybersecurity issues and solutions. This in turn, we believe will help us make great strides in strengthening the security and resilience of Critical Infrastructure from cyberthreats.</p><h3>Next Steps for the Framework</h3><p>While today's Framework is the culmination of a year-long effort that brought together thousands of individuals and organizations from industry, academia and government, it is just another step in a continuous process to improve the Nation's cybersecurity. The Framework is a living document that will need to be updated to keep pace with changes in technology, threats and other factors, and to incorporate lessons learned from its use. These updates will ensure the Framework meets the needs of critical infrastructure owners and operators in a dynamic and challenging environment.</p><p>Today, many organizations, led by their senior executives, are using the Framework and providing feedback to NIST and the Department of Homeland Security. This will help us identify improvements needed in the Framework. Industry groups, associations, and non-profits
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<!-- nist-index-ignore-start -->
|
|||
|
|
<div data-elastic-exclude="" class="nist-tags">
|
|||
|
|
<a href="/topic-terms/information-technology" hreflang="en">Information technology</a> and <a href="/topic-terms/cybersecurity" hreflang="en">Cybersecurity</a></div>
|
|||
|
|
<!-- nist-index-ignore-end -->
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<aside class="nist-page__region nist-page__region--sidebar-second tablet-lg:grid-col-4">
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-page__region nist-page__region--sidebar-second-top gray-box"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<h2 class="nist-block__title">Witness</h2>
|
|||
|
|
<p>Donna F. Dodson<br>Chief Cybersecurity Advisor, National Institute of Standards and Technology<br>United States Department of Commerce</p>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<h2
|
|||
|
|
class="nist-block__title"
|
|||
|
|
>Venue</h2>
|
|||
|
|
|
|||
|
|
<div class="text-long"><p>United States Senate<br>Committee on Homeland Security and Governmental Affairs</p></div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</aside>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="grid-container">
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-page__region nist-page__region--content-bottom"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
<div
|
|||
|
|
class="nist-block"
|
|||
|
|
>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="text-italic font-sans-2xs">
|
|||
|
|
Created December 13, 2016, Updated November 15, 2019
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</section>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div data-elastic-exclude>
|
|||
|
|
<!-- nist-index-ignore-start -->
|
|||
|
|
|
|||
|
|
<footer class="nist-footer padding-bottom-4">
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="grid-container nist-footer__info">
|
|||
|
|
<div class="grid-row">
|
|||
|
|
<div class="tablet:grid-col-6">
|
|||
|
|
<div class="nist-footer__logo">
|
|||
|
|
<a href="/" title="National Institute of Standards and Technology" rel="home">
|
|||
|
|
<img class="nist-footer__logo-img" src="/libraries/nist-component-library/dist/img/logo/NIST-Logo-Brand-White.svg" alt="National Institute of Standards and Technology logo" width="300px" height="42px" />
|
|||
|
|
</a>
|
|||
|
|
</div>
|
|||
|
|
<div class="nist-footer__contact">
|
|||
|
|
<h3 class="nist-footer__contact-heading">HEADQUARTERS</h3>
|
|||
|
|
<address>
|
|||
|
|
100 Bureau Drive<br>
|
|||
|
|
Gaithersburg, MD 20899<br>
|
|||
|
|
<a href="tel:301-975-2000">301-975-2000</a>
|
|||
|
|
</address>
|
|||
|
|
<p>
|
|||
|
|
<a href="mailto:do-webmaster@nist.gov">Webmaster</a> | <a href="https://www.nist.gov/about-nist/contact-us">Contact Us</a> | <a href="https://www.nist.gov/visit">Our Other Offices</a>
|
|||
|
|
</p>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
<div class="tablet:grid-col-6">
|
|||
|
|
<div class="nist-footer__social-links">
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--x-white" href=" https://x.com/NIST">
|
|||
|
|
<span>X.com</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--facebook-white" href=" https://www.facebook.com/NIST">
|
|||
|
|
<span>Facebook</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--linkedin-white" href=" https://www.linkedin.com/company/nist">
|
|||
|
|
<span>LinkedIn</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--instagram-white" href=" https://www.instagram.com/nist/">
|
|||
|
|
<span>Instagram</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--youtube-white" href=" https://www.youtube.com/NIST">
|
|||
|
|
<span>YouTube</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--giphy-white" href=" https://giphy.com/nist">
|
|||
|
|
<span>Giphy</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--rss-white" href=" https://www.nist.gov/news-events/nist-rss-feeds">
|
|||
|
|
<span>RSS Feed</span>
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
<a class="nist-social nist-social--envelope-white" href=" https://public.govdelivery.com/accounts/USNIST/subscriber/new">
|
|||
|
|
<span>Mailing List</span>
|
|||
|
|
</a>
|
|||
|
|
</div>
|
|||
|
|
<div class="nist-footer__feedback">
|
|||
|
|
How are we doing? <a class="usa-button" rel="nofollow" href="/form/nist-gov-feedback?destination=/speech-testimony/strengthening-public-private-partnerships-reduce-cyber-risks-our-nations-critical" title="Provide feedback">Feedback</a>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="grid-container">
|
|||
|
|
<div class="nist-footer__nav" role="navigation">
|
|||
|
|
<ul>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/privacy-policy">Site Privacy</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/oism/accessibility">Accessibility</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/privacy">Privacy Program</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/oism/copyrights">Copyrights</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.commerce.gov/vulnerability-disclosure-policy">Vulnerability Disclosure</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/no-fear-act-policy">No Fear Act Policy</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/office-director/freedom-information-act">FOIA</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/environmental-policy-statement">Environmental Policy</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/summary-report-scientific-integrity">Scientific Integrity</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.nist.gov/nist-information-quality-standards">Information Quality Standards</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://www.commerce.gov/">Commerce.gov</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="http://www.science.gov/">Science.gov</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="http://www.usa.gov/">USA.gov</a>
|
|||
|
|
</li>
|
|||
|
|
<li class="nist-footer__menu-item">
|
|||
|
|
<a href="https://vote.gov/">Vote.gov</a>
|
|||
|
|
</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
</footer>
|
|||
|
|
<!-- nist-index-ignore-end -->
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/1128326","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"back_to_top":{"back_to_top_button_trigger":100,"back_to_top_speed":1200,"back_to_top_prevent_on_mobile":false,"back_to_top_prevent_in_admin":true,"back_to_top_button_type":"image","back_to_top_button_text":"Back to top"},"google_analytics":{"account":"G-HEQ0YF2VYL","trackOutbound":true,"trackMailto":true,"trackTel":true,"trackDownload":true,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|bsh|c|csv|doc(x|m)?|dot(x|m)?|dw(fx|g|gd)|dxf|eps|epub|exe|f(90)|flv|gif|gz|gzip|hqx|jar|jpe?g|js|m1v|mp(2|3|4|e?g)|mobi|mov(ie)?|msi|msp|pdf|phps|pl|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|rfa|rtf|rvt|sch|sea|sit|swf|tar|tgz|tif|txt|txz|wav|wma|wmv|wpd|wrl|xls(x|m|b)?|xlt(x|m)|xlam|xml|xsd|z|zip"},"nist_search":{"clickTracking":"search-report-click","isDebug":false,"clickTrackEnabled":true,"message":"NIST Search in debug mode. Check the browsers network inspector for Click Track reporting results..."},"data":{"extlink":{"extTarget":false,"extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":false,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"\\.gov\\\/|\\.mil\\\/|\\manufacturingusa\\.com\\\/","extInclude":"","extCssExclude":".ck-editor, .nist-video-thumbnail__lightbox-trigger, a.nist-icon--mail-blue","extCssExplicit":"","extAlert":true,"extAlertText":"Thank you for visiting NIST. We hope your visit was informative. We have provided a link to this site because it has information that may be of interest to our users. NIST does not necessarily endorse the views expressed or the facts presented on this site. Further, NIST does not endorse any commercial products that may be advertised or available on this site. Click OK to be directed to your link.","mailtoClass":"0","mailtoLabel":"(link sends email)","extUseFontAwesome":false,"extIconPlacement":"after","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","whitelistedDomains":[]}},"user":{"uid":0,"permissionsHash":"bd6a443844dbe99b4e6942f3b1397526e760137efd2b1ee6b2d588fc414dff20"}}</script>
|
|||
|
|
<script src="/sites/default/files/js/js_jDaFaXhHm6gPUKstNYX9eIyoQXghVs3g7rbR0QoqpYY.js?scope=footer&delta=0&language=en&theme=nist_www&include=eJxdjW0OwjAIhi805UiErtjhWFlatHp7O53RLOEHPLwfgcYZ3fqsEH47XuuQzJIyUiZ9uowVjmDIUh0v0lm0ltUoopceIjlBos-7irMsa7E7wxFsLW_mEy_ce00DFVwsQpRKoQer5PmtgaQWSE-7BSamyOV7YmvtT8EP34wQy20lPe_nC6DrXYU"></script>
|
|||
|
|
<script src="https://siteimproveanalytics.com/js/siteanalyze_6017546.js" async></script>
|
|||
|
|
<script src="/sites/default/files/js/js_709kuJyJYTt2lWrlwglvgNyqkgqlZSSNCLusQNdUubs.js?scope=footer&delta=2&language=en&theme=nist_www&include=eJxdjW0OwjAIhi805UiErtjhWFlatHp7O53RLOEHPLwfgcYZ3fqsEH47XuuQzJIyUiZ9uowVjmDIUh0v0lm0ltUoopceIjlBos-7irMsa7E7wxFsLW_mEy_ce00DFVwsQpRKoQer5PmtgaQWSE-7BSamyOV7YmvtT8EP34wQy20lPe_nC6DrXYU"></script>
|
|||
|
|
<script type="text/javascript">window.NREUM||(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","licenseKey":"37b7ccb661","applicationID":"1089704227","transactionName":"YFxUN0sADEdYVkBaClkWdwBNCA1aFkVVVABoWlcAUQQ=","queueTime":5,"applicationTime":36,"atts":"TBtXQQMaH0k=","errorBeacon":"bam.nr-data.net","agent":""}</script></body>
|
|||
|
|
</html>
|