Cybersecurity Legislation Under Review; NIST to Release Draft Cybersecurity Framework; DHS Updated NIPP Release is Delayed

Legislative Activity

Cybersecurity Legislation

After postponing a previously scheduled markup due to the government shutdown, the House Homeland Security Committee plans to mark up the Critical Infrastructure Research and Development Advancement Act of 2013 (H.R. 2952) and the Homeland Security Cybersecurity Boots-on-the-Ground Act (H.R. 3107) on Thursday, October 24 at 9:00 am. The bills were previously considered in the Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies in September and are likely to be passed by the full committee this week. H.R. 2952 focuses on research and development efforts at the Department of Homeland Security (DHS) that seek to advance security technologies for critical infrastructure protection, while H.R. 3107 establishes cybersecurity occupation classifications, assesses the cybersecurity workforce, and develops a strategy to address identified gaps in the cybersecurity workforce at DHS.

Executive Branch Activity

NIST Cybersecurity Framework

Although an exact date has not yet been set, the National Institute of Standards and Technology (NIST) plans to release its draft Cybersecurity Framework in the coming days. The planned release of a new draft of the Framework was set for October 10 but was delayed due to the government shutdown. Stakeholders will be able to comment on the Cybersecurity Framework once it is released. NIST is also planning to hold a final workshop to discuss the draft Cybersecurity Framework on November 14-15 at North Carolina State University in Raleigh, North Carolina.

National Infrastructure Protection Plan

The release of DHS’s updated National Infrastructure Protection Plan (NIPP) on October 10 was also delayed due to the government shutdown. A new version of the NIPP is expected to also be released soon. The revised NIPP will now integrate approaches to address both physical and cybersecurity risks for critical infrastructure as well as continue to focus on the importance of planning, preparedness, response and recovery to man-made and natural disasters.