M5D2: Government and Private Sector Partnership in Critical Infrastructure Protection

37247M5D2: Government and Private Sector Partnership in Critical Infrastructure Protection

In most countries the majority of the critical infrastructure is owned and operated by the private sector. In the United States, the figure is approximately 85% according to the Information Sharing Environment (Links to an external site.)Links to an external site.. Homeland Security Presidential Directive (HSPD) No. 7 (Links to an external site.)Links to an external site. requires the Department of Homeland Security and the Sector Specific Agencies to collaborate with private sector entities and to share information on cyber threats, vulnerabilities, and best practices. The readings from Kaplan (2009) and Earls (2015) highlighted the difficulty in getting Congress to take the necessary legislative action to resolve some of the sticky legal issues in sharing information from government to the private sector and between private sector entities. The CISA legislation of December 2015 (Gardner & Broder, 2016) addressed some of these issues. Has it gone far enough?

Question

After completing the assigned readings for the module, please respond to the following question in your initial post:

1. Congress was slow to pass legislation on cybersecurity information sharing. The Cybersecurity Information Sharing Act (CISA) of 2015 followed at least ten years of discussion. Consider the electric power grid and the threats it faces, what are the limitations of the CISA and provide two changes/additions would you recommend? Please cite course materials or outside research when discussing your conclusions.

Read:

Required
Module Notes: Critical Infrastructure and Cybersecurity
Bayuk, J. L., Schmidt, J., Weiss, J., Sachs, M. H., Healey, J., & Rohmeyer, P. (2012). Cyber Security Policy Guidebook. Hoboken: Wiley.
Chapter 6.5
Chapter 7 (review)
https://www.dhs.gov/what-critical-infrastructure
https://www.nist.gov/cyberframework
and articles……