ABSTRACT

The development of national cyber incident response policy occurring in the civilian agencies of the federal government is largely handled by Department of Homeland Security. United States (US)-Computer Emergency Readiness Team is a coordinating body for cybersecurity incident response and awareness for the US federal government. To a computer engineer or systems administrator focusing on the security of systems, the idea that an annual review or multiyear certification would say much of anything about systems security is incomprehensible as threats continuously evolve. Collaboration on information security matters between government, industry, and academia largely currently rests with working groups constituted under the auspices of the Departments of Homeland Security and Defense, as well as the National Institute for Standards and Technology. In coping with cybersecurity, public sector managers must connect government policy with the technical vocabulary of computing and information security.