FCC Seeks Comments on Cybersecurity Risk Management and Best Practices Report | Practical Law

FCC Seeks Comments on Cybersecurity Risk Management and Best Practices Report | Practical Law

The FCC's Public Safety and Homeland Security Bureau is seeking comments on the Cybersecurity Risk Management and Best Practices report, released by the fourth Communications Security, Reliability and Interoperability Council.

FCC Seeks Comments on Cybersecurity Risk Management and Best Practices Report

Practical Law Legal Update 1-610-1945 (Approx. 3 pages)

FCC Seeks Comments on Cybersecurity Risk Management and Best Practices Report

by Practical Law Intellectual Property & Technology
Published on 27 Apr 2015 • USA (National/Federal)
The FCC's Public Safety and Homeland Security Bureau is seeking comments on the Cybersecurity Risk Management and Best Practices report, released by the fourth Communications Security, Reliability and Interoperability Council.
On March 19, 2015, the FCC's Public Safety and Homeland Security Bureau issued a notice seeking comments on recommendations in the Cybersecurity Risk Management and Best Practices report released by the fourth Communications Security, Reliability and Interoperability Council (CSRIC IV). The FCC also seeks suggestions for alternatives to achieve its goals.
The report, adopted by the CSRIC IV on March 18, 2015, includes analysis of the National Institute of Standards and Technology's Framework for Improving Critical Infrastructure Cybersecurity as it applies to different communications sectors such as:
  • The federal government.
  • State governments.
  • Equipment manufacturers.
  • Cybersecurity solution providers.
  • Financial, banking, and energy sectors.
The FCC is specifically seeking comments on:
  • Whether the report recommendations are sufficient to reduce cybersecurity risk to critical infrastructure, enterprises and consumers.
  • FCC procedures for company-specific meetings to assess the state of cybersecurity risk management among communications providers.
  • Measures to include in the Communications Sector Annual Report to provide appropriate levels of visibility about the segment-specific state of cybersecurity risk management over time.
  • How the FCC should coordinate with the Department of Homeland Security concerning the Critical Infrastructure Cyber Community C3 Voluntary Program to help small and mid-sized communications provides use the CSRIC IV recommendations.
  • Any barriers that would inhibit an industry's effective application of the voluntary mechanisms the report outlines.
The comments may be submitted electronically through the FCC website, by mail or through a scheduled meeting with FCC staff. Comments are due by May 29, 2015 and reply comments are due by June 26, 2015.