United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2007-03-20 monographic deposited born digital 30 p. GA 1.13:GAO-07-626T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-626T P0b002ee180389c03 f:d07626t DGPO 2010-08-12 2011-03-28 GAOREPORTS-GAO-07-626T machine generated eng fdlp REPORT GAOREPORTS-GAO-07-626T GAO-07-626T Critical infrastructure Critical infrastructure protection Cyber security Federal/state relations Homeland security Information disclosure Policy evaluation Private sector Security assessments Strategic planning Interorganizational relations Public/private partnerships GAO High Risk Series National Infrastructure Protection Plan Testimony A67045 As Hurricane Katrina so forcefully demonstrated, the nation's critical infrastructures--both physical and cyber--have been vulnerable to a wide variety of threats. Because about 85 percent of the nation's critical infrastructure is owned by the private sector, it is vital that the public and private sectors work together to protect these assets. The Department of Homeland Security (DHS) is responsible for coordinating a national protection strategy including formation of government and private sector councils as a collaborating tool. The councils, among other things, are to identify their most critical assets, assess the risks they face, and identify protective measures, in sector-specific plans that comply with DHS's National Infrastructure Protection Plan (NIPP). This testimony is based primarily on GAO's October 2006 sector council report and a body of work on cyber critical infrastructure protection. Specifically, it addresses (1) the extent to which these councils have been established, (2) key facilitating factors and challenges affecting the formation of the council, (3) key facilitating factors and challenges encountered in developing sector plans, and (4) the status of DHS's efforts to fulfill key cybersecurity responsibilities. GAO has made previous recommendations, particularly in the area of cybersecurity that have not been fully implemented. Continued monitoring will determine whether further recommendations are warranted. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-626T/html/GAOREPORTS-GAO-07-626T.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-07-626T/pdf/GAOREPORTS-GAO-07-626T.pdf GAO-07-626T https://www.govinfo.gov/app/details/GAOREPORTS-GAO-07-626T Testimony GAO-07-626T; Critical Infrastructure: Challenges Remain in Protecting Key Sectors; Critical infrastructure Critical infrastructure protection Cyber security Federal/state relations Homeland security Information disclosure Policy evaluation Private sector Security assessments Strategic planning Interorganizational relations Public/private partnerships GAO High Risk Series National Infrastructure Protection Plan Title 5 Appendix 2 5 U.S.C. App. 2 Volume 116 Page 2135 116 Stat. 2135 Public Law 109-295