Critical infrastructure protection : significant challenges in safeguarding government and privately controlled systems from computer-based attacks / Statement of Joel C. Willemssen.

Cover title.

Includes bibliographic references.

An array of efforts has been undertaken to implement the national critical infrastructure protection strategy outlined in PDD 63. However, progress in certain key areas has been limited. Outreach efforts by numerous federal entities to establish cooperative relationships with and among private and other nonfederal entities have raised awareness and prompted information sharing. However, efforts to perform substantive analyses of sector-wide and cross-sector interdependencies and related vulnerabilities have been limited. In addition, federal agencies have taken initial steps to develop critical infrastructure protection plans; but, as mentioned above, significant weaknesses continue to be identified in their computer-based controls. Further, although the National Infrastructure Protection Center (NIPC) has initiated a variety of critical infrastructure protection efforts that have laid a foundation for future governmentwide efforts, it has not developed the analytical and information-sharing capabilities that Presidential Decision Directive (PDD) 63 asserted are needed. Developing such capabilities is a formidable task that experts say will take an intense interagency effort.