5: Voluntary Support Program
Establish a voluntary program to support the adoption of the Cybersecurity Framework. Other Information:
Sec. 8. Voluntary Critical Infrastructure Cybersecurity Program. (a) The Secretary, in coordination with Sector-Specific Agencies,
shall establish a voluntary program to support the adoption of the Cybersecurity Framework by owners and operators of critical
infrastructure and any other interested entities (the ‘‘Program'').
Stakeholder(s):
- Sector-Specific Agencies: (b) Sector-Specific Agencies, in consultation with the Secretary and other interested agencies, shall coordinate with the
Sector Coordinating Councils to review the Cybersecurity Framework and, if necessary, develop implementation guidance or supplemental
materials to address sector-specific risks and operating environments. (c) Sector-Specific Agencies shall report annually
to the President, through the Secretary, on the extent to which owners and operators notified under section 9 of this order
are participating in the Program.
- Secretary of Homeland Security: (d) The Secretary shall coordinate establishment of a set of incentives designed to promote participation in the Program.
Within 120 days of the date of this order, the Secretary and the Secretaries of the Treasury and Commerce each shall make
recommendations separately to the President, through the Assistant to the President for Homeland Security and Counterterrorism
and the Assistant to the President for Economic Affairs, that shall include analysis of the benefits and relative effectiveness
of such incentives, and whether the incentives would require legislation or can be provided under existing law and authorities
to participants in the Program.
- Secretary of the Treasury
- Secretary of Commerce
- Assistant to the President for Homeland Security and Counterterrorism
- Assistant to the President for Economic Affairs
- Secretary of Defense: (e) Within 120 days of the date of this order, the Secretary of Defense and the Administrator of General Services, in consultation
with the Secretary and the Federal Acquisition Regulatory Council, shall make recommendations to the President, through the
Assistant to the President for Homeland Security and Counterterrorism and the Assistant to the President for Economic Affairs,
on the feasibility, security benefits, and relative merits of incorporating security standards into acquisition planning and
contract administration. The report shall address what steps can be taken to harmonize and make consistent existing procurement
requirements related to cybersecurity.
- Administrator of General Services
- Federal Acquisition Regulatory Council
Objective(s):
|
