Thompson, Richmond: Delayed Cyber Strategy Shows DHS is Behind

Press Release

Today, Rep. Bennie G. Thompson (D-MS), Ranking Member of the Committee on Homeland Security, and Rep. Cedric L. Richmond (D-LA), Ranking Members of the Cybersecurity and Infrastructure Protection Subcommittee, released the below statement on the release of the Department of Homeland Security's delayed Cybersecurity Strategy.

Rep. Richmond originally authored the language in the FY2017 National Defense Authorization Act (Section 1912) mandating the Strategy (original bill H.R. 3510). Also, on May 11, Reps. Thompson and Richmond wrote Homeland Security Secretary Nielsen inquiring on the status of the delayed Strategy.

"The Department's long-awaited Cybersecurity Strategy provides an important and promising framework to guide future efforts to address evolving cybersecurity challenges, and we are pleased that DHS finally submitted it to Congress as required by law. Unfortunately, the Strategy arrived 14 months late and primarily identifies policies and procedures the Department needs to further develop and more clearly articulate its doctrine. It also fails to mention -- at any point -- one of the most pressing cybersecurity challenges of this moment: election security. The fact is, because of the Department's failure to adhere to the statutorily-mandated deadline, it lost time and missed opportunities to make progress maturing its cybersecurity posture and capabilities."

"The Department is required to submit an implementation plan to Congress within 90 days, which we hope will put some meat on the bones of this strategy. In particular, we expect it will provide greater detail on the roles and responsibilities that components will undertake, a description of any new authorities it needs to fulfill its mission to secure Federal networks, as well as an explanation of what resources the Department will need. We look forward to receiving the implementation plan on time and we look forward to working with the Department as it continues its work to make cyber networks more secure and more resilient."

Source