The GAO reports that while the Department has been tasked with coordinating the protection of computer systems supporting our nation's critical infrastructures, it cannot begin to implement a strategic, systematic plan until it confronts and resolves the underlying problems of "achieving organizational stability, gaining organizational authority, overcoming hiring and contracting issues, increasing awareness about cybersecurity roles and capabilities, establishing effective partnerships with stakeholders (i.e. other federal, state, and local governments and the private sector), achieving two-way information sharing with these stakeholders, and providing and demonstrating the value DHS can provide."
Over the past year, several senior DHS cybersecurity officials -- including the National Cybersecurity Division Director, the Under Secretary for Information Analysis and Infrastructure Protection Directorate, and the Assistant Secretary responsible for the Information Protection Office -- have left the Department. The report notes that in 2004, the Select Committee on Homeland Security expressed concern that these cybersecurity officials lacked the organizational authority to effectively fulfill its role.
"GAO's analysis affirms what this Committee has been saying for the past two and a half-years -- the status quo does not serve our cybersecurity needs," said Chairman Christopher Cox (R-CA). "Responsibility for cybersecurity needs to be elevated and better coordinated within the Department. The nation needs a principal Federal authority on cybersecurity to secure this vital component of our national infrastructure."
The Department of Homeland Security Authorization Act of 2005, approved unanimously by the Committee on Homeland Security and passed 424-4 by the House on May 18th, creates an Assistant Secretary for Cybersecurity with powers and duties to more effectively carry out the cybersecurity missions of the Department.
The newly created position would allow for higher level input into national policy decisions and provide a single visible point of contact within the federal government to improve interactions with the private sector.
View GAO Report
