Cybersecurity Law

Chapter 6Public–Private Cybersecurity Partnerships

1. U.S. Government's Civilian Cybersecurity Organization
2. Department of Homeland Security Information Sharing under the Cybersecurity Act of 2015
3. Energy Department's Cyber-Threat Information Sharing
4. Critical Infrastructure Executive Order and the National Institute of Standards and Technology's Cybersecurity Framework
5. U.S. Military Involvement in Cybersecurity and the Posse Comitatus Act

 

Much of this book focuses on the consequences that a company may face for inadequate cybersecurity, such as enforcement actions or lawsuits by the Federal Trade Commission or state attorneys general. However, the federal government's role in private-sector cybersecurity is not merely one of a regulator. The government also operates a number of programs that are designed to help companies battle the ever-evolving field of cybersecurity threats. Cyberspace is unique in that it involves both public and private infrastructure, and therefore the federal government recognizes that it has a role in securing the Internet. Moreover, the federal government can act as a central repository of cybersecurity information.

This chapter first reviews the increasingly centralized civilian cybersecurity operations, many of which are located within the Department of Homeland Security. It next examines DHS's cybersecurity information-sharing program, created by the Cybersecurity Act of 2015, and a similar program that the U.S. Energy Department operates for electric ...