The Cyber Security Framework

Introduction: - for my research project, I would like to explore about the cyber security measures. Cybersecurity covers the fundamental concepts underlying the construction of secure systems from the hardware to the software to the human computer interface, with the use of cryptography to secure interactions. These concepts are easily augmented with hands-on exercises involving relevant tools and techniques. We have different types of computer related crimes, cybercrimes, computer related offenses, federal approaches defenses. The information resources management has the technical matters for which IT are widely known. Cyber resources and cyber power as well as cyber security. We have spent a lot of time talking about many different high level critical infrastructure protection concepts we have general rule stayed away from cyber security explaining the ins and out of how the NIPP and NRF work together to ensure that we can live our daily live in relative comfort.

It is essential to understand America’s critical infrastructure and key resources (CIKR) and National Infrastructure Protection Program (NIPP) to ensure survivability of its critical assets, while maintaining security for America. “The plans are carried out in practice by an integrated network of Federal departments and agencies, State and local government agencies, private sector entities, and a growing number of regional consortia (DHS, 2009, p. I).” Several agencies work together to mitigate attacks on CIKR to protect public safety and security of the nation. A terrorist may stop at nothing to carry out an attack on CIKR. If an attack or natural disaster does transpire, each agency working together to restore the damage must be timely. Additionally, NIPP helps to identify hazards associated with the various sectors, and provides necessary security measures to harden resources (DHS,

The Internet, as we all know, has rapidly spread around since its commercialization in the 1990s. It is evident that cybersecurity attacks are not going anywhere, and that government will continue to remain a target. In addition, the Internet of Things (IoT) growth will lead to more devices being connected to the networks. Therefore, with technology moving forward and hackers being more motivated as ever, the government finds itself struggling to keep up with effective cybersecurity measures and with filling up the designated positions in the Cybersecurity department.

During the course of this paper I will be evaluating the U.S security since 9/11, evaluating their ability to be resilient and evaluating how much progress has been done since 9/11. So you might ask, what is resilience? Resilience is defined as the ability to undergo obstacles and negative situations; and within that, overcome and recover. Prior to 9/11, there were several practices which were acceptable in our transportation system but today are no longer; let’s take a look at a few;

The Department of Homeland Security supplies a national protection plan concerning critical infrastructure security. This plan targets a wide audience, including public and private critical infrastructure owners and administrators. Managing risks through identifying, deterring, and disrupting threats to critical infrastructure is the direct focus of this plan. The ability of an organization to reduce the impact of a threat that has occurred and reducing the impact of one that may occur is essential to an active security posture. Compromise of a critical infrastructure such as oil, airports, or traffic flow management could result in a major loss of life or resources (Department of Homeland Security, 2013).

To improve our readiness to combat and battle these threats. In Seattle,there are secure fiber networks being put together to interlink the government and emergency operations. Not only Seattle but many other cities and countries have invested local funds in creating new 911 centers and emergency operation ceters. Worried about these attacks and threats the United States have “hardened” the control networks that manage electricity and water grids. The entire field of cyber security and information technology has a new way of confronting not only terrorist threats but all of the ongoing issues created by hackers and identity thieves. Knowing if America is safer now than in 2001, especially since Bin Laden's death ,the United States will not know. But in not knowing, where, how, or when a threat could be more than just that the United States has become more vigilant and more prepared (Proud To

The 9-11 incident shocked the world. People remember the picture of 911 as clearly as they remember yesterday, even though it has been 14 years ago. The Department of Homeland Security (DHS) and its many partners across the federal government, public and private organizations, and communities across the country have worked since 9/11 to build a new homeland security enterprise to better decrease and defend against dynamic threats, minimize risks, and maximize the ability to respond and recover from attacks and disasters. In the wake of the attacks of September 11, 2001, many trade associations developed or enhanced security operations to deal with terrorist threats. Numerous owners and operators of transportation

United States’ national infrastructure are resources that are vital to keep commerce operating. Technology have allowed the governments and the private sector to share vital information with them. The nation well-being depend on each of the critical infrastructures, the big question is on how to maintain all of our infrastructure sectors operative without any problem. There a big wave of threats to our nation and if one of this threads go through, it can created a multidimensional problem to the infrastructure system of the country. The main concerns that exist in protecting the U.S. against any attacks to any U.S. infrastructure and in the same time on how to have a system that work well with other agencies. For example; is important to

Without a doubt, cybersecurity is one of the biggest threats the DHS faces. As technology evolves, this threat will continue to grow. What is the department doing about it? A cyber-attack could cause serious damage to our critical infrastructure if it was done properly. This is something that must be protected! The first step is to protect our federal networks and critical infrastructure. “The Department of Homeland Security (DHS) works with each federal civilian department and agency to promote the adoption of common policies and best practices that are risk-based and able to effectively respond to the pace of ever-changing threats. As systems are protected, alerts can be issued at machine speed when events are detected

Cyber security is a major concern for every department, business, and citizen of the United States because technology impacts every aspect of our daily lives. The more we use technology the more complacent, we get with the information that is stored within our cyber networks. The more complacent, we get, the more vulnerable we become to cyber-attacks because we fail to update the mechanisms that safeguard our information. Breaches to security networks are detrimental to personal, economic, and national security information. Many countries, like Russia, China, Israel, France, and the United Kingdom, now have the abilities and technology to launch cyber-attacks on the United States. In the last five years there have been several attacks on cyber systems to gain access to information maintained by major businesses and the United States Government. Cyber-attacks cause serious harm to the United States’ economy, community, and the safety, so we need to build stronger cyber security mechanisms. Based on my theoretical analysis, I recommend the following:

The Federal Government needs to create information systems which are more effective shielded systems to protect their assets and resources at home. The foundation of any mandated cybersecurity strategies that secure our nation national security must incorporate worldwide or state local threats whether targeted toward the federal government or the private sector forces. The OPM breach highlighted the insufficient and inconsistence security approaches the federal government has already used in modernizing the existing cybersecurity policies. There is a requirement for the United States government to institute polices that would incorporate and implement new government cybersecurity structures and centralized the protection of their assets to avert future breaches (Source). Examining the inadequacies in the current national cybersecurity policies and regulations is disappointing as OPM choice to implement these mechanisms and the current authoritative propositions to cybersecurity must change immediately. It was reported that OPM only spent $2 million in 2015 to avert pernicious digital assaults, while the Department of Agriculture spent $39 million. The Department of Commerce, Department of Education, and Department of Labor likewise invested more money in cybersecurity resources than the Office of Personnel Management. The Small Business Administration devoted a similar amount into cybersecurity to recognizing, examining, and alleviate any cyber breaches as OPM, however

Today’s dynamic threats to American assets and infrastructure require the capability of security entities, at all levels, to communicate and integrate effectively. Critical Infrastructure (CI) is a key area that must be protected. This paper will focus on the energy sector and analyze: specific goals and objectives; an assessment of and analysis of risks; sector specific implementations of risk management; and measure the effectiveness of the current procedures in place.

The attacks on critical infrastructure have become a growing cause of concern for governments and private providers’ internationally whether caused through cybercriminals pursuing financial gain or by hackers as political acts intended to emasculate governments’ and companies’ credibility. The anxiety around these threats is vindicated, as research exhibits that attacks on the critical infrastructure are greater than before in both complexity and prevalence and will endure to develop in the near future. The site management and monitoring have progressed for critical infrastructure facilities as they have become more increasingly connected to the internet. However, added convenience of connectivity has turned once limited attack surface of these industries into a fertile landscape for cyber-attacks. Due to the potentially high profile impacts of attacks on critical infrastructure systems, these industries have become even more attractive targets for cybercriminals (Cavelty, 2014).

Every state in the nation should have a comprehensive IT security policy due to the “growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems” ("Cyberspace policy RevIew", 2016). Because of “ the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights” ("Cyberspace policy RevIew", 2016). It is the responsibility of state and the federal government “ to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” ("Cyberspace policy RevIew", 2016).

The National Institute on Standards and Technology issued a forty-one page report on cyber security that outlines a frame work for organizations to recognize and defend against threats. The report provides a frame work that has five functions that go with a set of