[Federal Register Volume 63, Number 150 (Wednesday, August 5, 1998)]
[Notices]
[Pages 41804-41806]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 98-20865]
-----------------------------------------------------------------------
DEPARTMENT OF COMMERCE
National Telecommunications and Information Administration
[Docket No. 980716177-8177-01]
Presidential Decision Directive 63 on Critical Infrastructure
Protection: Sector Coordinators
AGENCY: National Telecommunications and Information Administration,
Commerce.
ACTION: Notice and request for expressions of interest.
-----------------------------------------------------------------------
SUMMARY: America's national and economic security are increasingly
reliant on certain critical infrastructures and upon cyber-based
information systems. Accordingly, in Presidential Decision Directive
63, the President directed the establishment of a program addressing
the Nation's need for protection of its critical infrastructures.
Critical infrastructures are those physical and cyber-based systems
essential to the minimum operations of the economy and government. They
include, but are not limited to, telecommunications, energy, banking
and finance, transportation, water systems and emergency services, both
governmental and private. The President has assigned to the Department
of Commerce the lead agency responsibility for the information and
communications (I&C) infrastructure. The Secretary of Commerce has
designated the National Telecommunications and Information
Administration (NTIA) to carry out those responsibilities.
Presidential Decision Directive 63 calls for representatives of the
private sector, called Sector Coordinators (SCs), to represent the
interests of critical infrastructure owners and operators in the
development of infrastructure assurance plans. NTIA is seeking
suggestions from the I&C private sector on the best way to fulfill the
role of SCs in representing the I&C private sector on the Critical
Infrastructure Assurance Program with the U.S. Government Sector
Liaison Official (SLO), Larry Irving, Assistant Secretary of Commerce
and NTIA Administrator. In addition, NTIA is seeking expressions of
interest from private sector I&C entities capable of fulfilling the
role of SC. In addition, comments are invited on the I&C infrastructure
definitions provided in this notice.
DATES: Expressions of interest must be received by September 4, 1998.
ADDRESSES: Expressions of interest may be mailed to Irwin M. Pikus,
Infrastructure Assurance Program, National Telecommunications and
Information Administration (NTIA), Room 4898, U.S. Department of
Commerce, 1401 Constitution Ave., NW, Washington, DC 20230, or
submitted in electronic form to [email protected]. Electronic
submissions should be in ASCII, WordPerfect (please specify version) or
Microsoft Word (please specify version) format, and should be included
as attachments to the electronic message. If you do not receive an
acknowledgement of receipt, please contact [email protected], or
call 202/482-2333. Please note: Comments filed electronically at the
above address and any other official address will be posted on the NTIA
website at www.ntia.doc.gov/ntiahome/infrastructure/index.html. Paper
submissions should include three paper copies and a version on diskette
in a format specified above.
FOR FURTHER INFORMATION CONTACT: Helen Shaw, NTIA, 202/482-2333.
SUPPLEMENTARY INFORMATION:
Background
Every sector of the U.S. economy--including manufacturing,
transportation, energy and utilities, retail and wholesale trade,
education, healthcare, finance and government--employs information
technology and services in its operations. The U.S. communications and
information infrastructure is comprised of: The physical facilities
used to transmit, store, process, and display voice, data and images,
as well as the information itself; applications and software to allow
users to access the information; and the network standards and
transmission codes that facilitate interconnection and interoperation
among networks, ensuring privacy and security of the information, and
network security and reliability.
Following the recommendations of a commission created under
Executive Order 13010, the President directed the establishment of an
interagency program addressing the Nation's need for protection of its
critical infrastructures. The protection of critical infrastructures in
the national interest requires a closely coordinated effort of both
public and private sectors since most of the information and
communications (I&C) infrastructure is owned and operated by private
sector entities. Because the Secretary of Commerce designated the
National Telecommunications and Information Administration (NTIA) to
carry out the critical infrastructure protection responsibilities for
the I&C sector, Larry Irving, Assistant Secretary for Communications
and Information and Administrator of NTIA, will serve as the Sector
Liaison Official (SLO) under Presidential Decision Directive (PDD-63)
to work with the I&C sector.
In the spirit of public-private partnership, NTIA is seeking to
identify sector coordinators (SCs) to work closely with NTIA in
accomplishing the objectives of the President's program. Together, the
SLO and the SCs, along with the departments and corporations they
represent, will contribute to a sectoral National Infrastructure
Assurance Plan by: Assessing the vulnerabilities of the sector to cyber
or physical attacks; recommending a plan to eliminate significant
vulnerabilities; proposing a system for identifying and preventing
attempted major attacks; and developing a plan for alerting,
containing, and rebuffing an attack in progress and then, in
coordination with the Federal Emergency Management Agency (FEMA) as
appropriate, rapidly reconstituting minimum essential capabilities in
the aftermath of an attack. In addition to producing the
[[Page 41805]]
sectoral plan, NTIA foresees this partnership for critical
infrastructure protection as an on-going, long-term dialogue, and an
education and awareness program among the Federal, state and local, and
private entities of the I&C sector.
The characteristics of the I&C sector create the likelihood that no
single existing private sector individual or organization can serve
adequately within its current mission as the I&C sector coordinator.
NTIA will conduct discussions with a broad cross section of the I&C
sector for the purpose of facilitating the identification of possibly
more than one SC. Interested parties are invited to provide necessary
information to NTIA.
NTIA is seeking suggestions on identifying SCs and expressions of
interest from private sector telecommunications and information
entities capable of fulfilling the role of SC in sharing responsibility
for the Critical Infrastructure Assurance Program with the SLO,
Assistant Secretary Larry Irving, Administrator of NTIA. The intention
of the President's program is that the SLO and the SCs will cooperate
in recommending the sector's infrastructure assurance plan, which will
become a major element in the national plan, as well as in developing
and implementing a vulnerability and awareness program for the sector.
Infrastructure Definitions
Infrastructure
An infrastructure is the framework of organizations, personnel, and
systems for identifiable industries, institutions, and distribution
capabilities that provide a flow of goods and services essential to the
economic well-being and national security of the United States, to the
smooth functioning of governments at all levels, and to society as a
whole.
Information Infrastructure
For the purpose of soliciting suggestions on identifying SCs and
expressions of interest from private sector telecommunications and
information entities capable of fulfilling the role of SC, we define
the information infrastructure as comprising procedures, personnel,
organizations, and installed information technology (including
hardware, software, and firmware) that acquires, stores, manipulates,
disseminates, and presents information to the user, including
information services, such as computer services, data processing and
network services, electronic commerce services, and electronic
information services. The information industry, for example, supplies
multimedia information services in audio, video, and text formats via
computer, fax, television, and other means. The Internet is providing
new modalities for information services.
Telecommunications Infrastructure
For the purpose of soliciting suggestions on identifying SCs and
expressions of interest from private sector telecommunications and
information entities capable of fulfilling the role of SC, we define
telecommunications as comprising any transmission, emission, or
reception of signs, signals, writing, images, and sounds or
intelligence of any nature by wire, radio, optical or other
electromagnetic systems. The telecommunications infrastructure includes
the organizations, personnel, procedures, facilities, and networks
employed to transmit information by wire, radio, or fiber optics, that
provide the means for supplying services, such as telephony or mass
media (e.g., traditional radio or television broadcasting as well as
cable and satellite broadcasting). Examples of advanced
telecommunications systems include direct broadcast satellite (DBS),
digital audio broadcasting (DAB), Advanced Digital Television, and
Global Positioning System (GPS), used extensively for precise
navigation and timing.
Role of Sector Coordinators
The SCs will have major involvement with NTIA, the SLO for the I&C
sector. The SCs will also be involved with the National Coordinator and
the National Infrastructure Assurance Council, and, to a lesser degree,
other program organizations and U.S. Government agencies.
NTIA and Department of Commerce goals include the fullest,
appropriate, legal sharing of information and views on all matters
related to I&C infrastructure protection, both from government to the
private sector and from the private sector to government, in a manner
that appropriately protects the safety, privacy, and other legitimate
concerns of all parties. This must include adequate opportunities for
sharing a broad range of information, including minority and dissenting
opinions, so that all pertinent information and ideas can be understood
and addressed by those who may be affected.
In support of this openness, we expect and are asking entities
expressing interest in serving as potential SCs to verify their
understanding of the following:
--The SCs as a group will not serve in any capacity that would trigger
the requirements of the Federal Advisory Committee Act;
--NTIA primarily seeks information;
--If NTIA or the Department requires advice, they expect to seek advice
from individuals, especially those who have expressed interest in
serving as potential SCs, and not from committees or groups;
--Potential SCs must agree not to offer group or consensus advice to
U.S. Government officials; and
--The SCs will represent the views and interests of the private sector
in addressing the protection of the infrastructure.
Specific responsibilities of SCs may include the following:
1. Enter into a memorandum of understanding between the private
sector participants and the U.S. Government, mutually agreed to and
delineating the private sector and government roles and
responsibilities.
2. Collaborate with the SLO, providing information and individual
advice.
3. Participate in the development of the National I&C Critical
Infrastructure Protection Plan.
3.1 Establish a network of private sector stakeholders in the plan.
3.2 Meet with U.S. Government officials and private sector
stakeholders.
3.3 Identify points of contact from private sector organizations.
3.4 Review interim outputs of the NTIA Planning Support Team.
3.5 Jointly (with NTIA) submit the schedule to the National
Coordinator.
4. Assist in the establishment of the National Infrastructure
Assurance Council (NIAC).
4.1 Identify potential panel members for NTIA's consideration.
4.2 Review NIAC recommendations.
5. Assist in the creation of the Information Sharing and Analysis
Center (ISAC).
5.1 Gather ISAC information from private sector stakeholders.
5.2 Provide sector input into the design of the ISAC.
6. Assist in the conduct of special studies.
6.1 Identify private sector participants.
6.2 Review study results.
7. Assist in public outreach.
7.1 Identify best methods for outreach.
7.2 Organize private sector education efforts.
[[Page 41806]]
7.3 Organize selected awareness events.
8. Assist private sector to achieve infrastructure security.
8.1 Assemble private sector input.
8.2 Review proposed activities.
Identification Criteria
NTIA seeks SCs with the following characteristics. Each respondent
should indicate the degree to which they or any entity or approach they
are recommending are:
(a) Acceptable to a broad spectrum of the constituency of the
sector;
(b) Knowledgeable about the structure and operation of the sector;
(c) Familiar with the sector's interactions with the U.S.
Government and with government programs similar to the current effort;
(d) Able to articulate the issues regarding critical infrastructure
protection to their constituencies with sufficient clarity and
credibility to motivate positive responses to requests for information
and for supporting actions;
(e) Able to develop broad support across the sector regarding
infrastructure assurance matters;
(f) Sufficiently senior to interact effectively with senior U.S.
Government officials; and
(g) Able to devote a substantial amount of time to this effort,
particularly through the PDD-63 two-year time line for initial
capability.
Shirl Kinney,
Deputy Assistant Secretary and Administrator, National
Telecommunications and Information Administration.
[FR Doc. 98-20865 Filed 8-4-98; 8:45 am]
BILLING CODE 3510-60-P