By United States. Government Accountability Office

From the document: "Critical infrastructure provides essential functions--such as supplying water, generating energy, and producing food--that underpin American society. Disruption or destruction of the nation's critical infrastructure could have debilitating effects. CISA [Cybersecurity and Infrastructure Security Agency] is the national coordinator for infrastructure protection. The William M. (Mac) Thornberry National Defense Authorization Act for Fiscal Year 2021 includes a provision for GAO [Government Accountability Office] to report on the effectiveness of sector risk management agencies in carrying out responsibilities set forth in the act. This report addresses (1) how the act changed agencies' responsibilities, and the actions agencies have reported taking to address them; and (2) the extent to which CISA has identified and undertaken efforts to help agencies implement their responsibilities set forth in the act. GAO analyzed the act and relevant policy directives, collected written responses from all 16 sectors using a standardized information collection tool, reviewed other DHS documents, and interviewed CISA officials."

Wasginton D.C. United States. Government Accountability Office. 2023.

By Cybersecurity and Infrastructure Security Agency:

From the Introduction: "Infrastructure is the backbone of our communities, providing not only critical services (such as water, transportation, electricity, and communications), but also the means for health, safety, and economic growth. These systems often extend beyond our communities providing service to entire regions and contributing to the delivery of National Critical Functions [hyperlink]. Given the vital importance of infrastructure to our social and economic well-being, it is imperative we ensure our networks are strong, secure, and resilient. [...] The Cybersecurity and Infrastructure Security Agency (CISA) developed the Infrastructure Resilience Planning Framework (IRPF) to provide an approach for localities, regions, and the private sector to work together to plan for the security and resilience of critical infrastructure services in the face of multiple threats and changes. The primary audience for the IRPF is state, local, tribal, and territorial governments and associated regional organizations; however, the IRPF can be flexibly used by any organization seeking to enhance their resilience planning. It provides resources for integrating critical infrastructure into planning as well as a framework for working regionally and across systems and jurisdictions."

United States. Cybersecurity & Infrastructure Security Agency. Nov. 2022. 56p.