Defense Civil Support: DOD Needs to Address Cyber Incident Training Requirements, Report to Congressional Committees [open pdf - 2MB]
"The Presidential Policy Directive on United States Cyber Incident Coordination states that significant cyber incidents are occurring with increasing frequency impacting public and private infrastructure in the United States. Section 1648 of the National Defense Authorization Act for Fiscal Year 2016 included a provision that DOD develop a comprehensive plan for CYBERCOM [US Cyber Command] to support civil authorities in responding to cyberattacks by foreign powers against the United States. Section 1648 also included a provision that GAO [United States Government Accountability Office] review DOD's plan. This review assesses the extent to which DOD's Section 1648 report addressed the statutorily required submission elements."
Government Accountability Office: http://www.gao.gov/