EFFECTIVENESS OF NATIONAL CYBER POLICY TO STRENGTHEN THE SECURITY AND RESILIENCE OF CRITICAL INFRASTRUCTURE AGAINST CYBER ATTACKS

Thumbnail Image
Files
20Sep_Simon_Ian.pdf (636.42 KB)
Authors
Simon, Ian G.
Subjects
critical infrastructure
cyber
policy
Advisors
Davis, Duane T.
Date of Issue
2020-09
Date
Sep-20
Publisher
Monterey, CA; Naval Postgraduate School
Language
Abstract
Presidential Policy Directive (PPD) 21, Critical Infrastructure Security and Resilience, directs a whole-of-government approach to strengthening the security and resilience of critical infrastructure against physical and cyber threats. Per policy, critical infrastructure is categorized into 16 sectors. Security and resiliency efforts against cyber threats are constrained by this sector-based approach. This thesis assesses the sector-based approach by the following criteria: expertise or a notable advantage of the sector-specific agency; promotion of cybersecurity measures by the critical infrastructure community partnership structure; and legislation, policy, or sector-specific characteristics that enhance security and resilience of the sector. These assessments gauged the adequacy of organizational structures that lead and support critical infrastructure cybersecurity. Exemplar cyber attacks against critical infrastructure and response actions are described in order to demonstrate strengths and limitations of the sector-based approach. This examination reveals that the U.S. approach to critical infrastructure is well conceived and executed in general. A number of significant vulnerabilities do remain in some sectors, however, as a result of incomplete or insufficient implementation.
Type
Thesis
Description
URI
https://hdl.handle.net/10945/66140
Series/Report No
Department
Information Sciences (IS)
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Distribution Statement
Approved for public release. distribution is unlimited
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States
Collections
Theses