GAO questions DHS process on Critical Infrastructure Security. DHS issued guidance that instructed lead federal agencies to develop plans for protecting critical cyber and physical infrastructure in industries such as banking and finance, energy and public health. Only nine of 17 sector-specific plans (SSPs) have been updated, and of nine updates, only three addressed missing cyber criteria. GAO: Lack of plans that fully address key cyber criteria has reduced the effectiveness of the existing sector planning approach and thus increases the risk that the nation’s cyber assets have not been adequately identified, prioritized and protected.”]
Source: https://www.govinfosecurity.com/protecting-vital-private-dhs-priority-a-1890