Cybersecurity Executive Order 13636 and the Critical Infrastructure Framework

Cyberthreats to U.S. infrastructure and other assets are a growing concern to policymakers. Information and communications technology (ICT) is ubiquitous and relied upon for government services, corporate business processes, and individual professional and personal pursuits -- almost every facet of modern life. Many ICT devices and other components are interdependent, and disruption of one component may have a negative, cascading effect on others. A denial of service, theft or manipulation of data, or damage to critical infrastructure through a cyber-based attack could have significant impacts on national security, the economy, and the livelihood and safety of individual citizens. The federal legislative framework for cybersecurity is complex, with more than 50 statutes addressing various aspects of it either directly or indirectly. Many observers do not believe that the current framework is sufficient to address the growing concerns about the security of cyberspace in the United States. However, no major cybersecurity legislation has been enacted since 2002. This book provides an overview of the 2013 cybersecurity executive order and discusses considerations for Congress. It also provides ways to improve the critical infrastructure of cybersecurity.