Critical Releases in Homeland Security: June 26, 2013

"In 2010, the Office of Management and Budget designated the Department of Homeland Security (DHS) with the primary responsibilities of overseeing the Federal-wide information security program and evaluating its compliance with the 'Federal Information Security Management Act of 2002'. The National Protection and Programs Directorate (NPPD), which is primarily responsible for fulfilling DHS security missions, assumed this responsibility for the Department. Subsequent to the President's issuance of Executive Order 13618 in July 2012, NPPD's Office of Cybersecurity and Communications was reorganized in an effort to promote security, resiliency, and reliability of the Nation's cyber and communications infrastructure. We audited NPPD to determine whether the Office of Cybersecurity and Communications has implemented its additional cybersecurity responsibilities effectively to improve the security posture of the Federal Government. […] Although actions have been taken, NPPD can make further improvements to address its additional cybersecurity responsibilities. For example, the Federal Network Resilience division must develop a strategic implementation plan to define its long-term goals on improving agencies' information security programs. Further, increased communication and coordination with Government agencies can improve the 'Federal Information Security Management Act' reporting process. Finally, NPPD must address deficiencies in maintaining and tracking the training records of CyberScope contractor personnel and implement the required DHS baseline configuration settings. We are making six recommendations to the Acting Assistant Secretary, Office of Cybersecurity and Communications. NPPD concurred with all recommendations and has begun to take actions to implement them."

"Many people think of a house of worship as a safe area where violence and emergencies cannot affect them. However, violence in houses of worship is not a new phenomenon. In addition to violent acts, fires, tornados [sic], floods, hurricanes, earthquakes, and arson also affect houses of worship. With many incidents occurring with little to no warning, many houses of worship are developing and updating plans and procedures to ensure the safety and security of their congregations, staff, and facilities. In collaboration with other houses of worship and community partners (i.e., governmental entities that have a responsibility in the plan, including first responders, public health officials, and mental health officials), houses of worship can take steps to plan for these potential emergencies through the creation of an emergency operations plan (EOP). Additionally, community organizations and private sector entities may have a role in the plan. Houses of worship are distinctive settings in that congregants share a common bond and have a predisposition to volunteer. The demographics of a congregation often mean that children and the elderly are present and may need assistance. This guide provides houses of worship with information regarding emergency operations planning for the spectrum of threats and hazards they may face. It discusses actions that may be taken before, during, and after an incident in order to reduce the impact on property and any loss of life and it encourages every house of worship to develop an EOP."