Selective Government Reports on Infrastructure Protection

Efforts made in infrastructure protection, or more specifically critical infrastructure protection (CIP), have expanded in recent years. While protecting our assets has long been in the country’s interest, Presidential Decision Directive-63 formalized U.S. policy on CIP and the creation of the U.S. Department of Homeland Security served to further Federal government endeavors in today’s challenging and threatening world.

The listing below offers a selective collection of key U.S. government reports concerning infrastructure protection, as well as relevant executive orders, presidential directives, and strategic and national planning documents. For a more extensive selection of CIP-related documents, as compiled during the CIP Oral History Project, please visit the CIP Digital Archive.

The documents featured on this webpage are organized under the following headers and subheaders:

• Executive Orders and Presidential Directives
• National-Level Reports
  • National Incident Management System (NIMS)
  • National Infrastructure Protection Plan (NIPP)
  • National Response Plan (NRP) / National Response Framework (NRF)
  • National Strategies
  • Other Executive Branch Reports
• Legislation
• Congressional Research Service (CRS) Reports
• U.S. Government Accountability Office (GAO) Reports
• 9/11 Commission Reports

Executive Orders and Presidential Directives

• Executive Order 12656--Assignment of emergency preparedness responsibilities, November 18, 1988 (52 FR 47491) (16 pages)
• Executive Order 13010 Critical Infrastructure Protection, July 15, 1996 (5 pages)
• Presidential Decision Directive-39: United States Policy on Counterterrorism, June 21, 1995 (13 pages)
• Presidential Decision Directive-63: Critical Infrastructure Protection, May 22, 1998 (13 pages)
• Fact Sheet: Protecting America's Critical Infrastructures: PDD 63, May 22, 1998 (2 pages)
• White Paper: The Clinton Administration’s Policy on Critical Infrastructure Protection: Presidential Decision Directive 63, May 22, 1998 (12 pages)
• A Plan in Response to Presidential Decision Directive 63 "Critical Infrastructure Protection", November 18, 1998 (110 pages)
• Homeland Security Presidential Directives (HSPDs)
  • HSPD-1: Organization and Operation of the Homeland Security Council, October 29, 2001 (4 pages)
  • HSPD-2: Combating Terrorism Through Immigration Policies, October 29, 2001 (4 pages)
  • HSPD-3: Homeland Security Advisory System , March 11, 2002 (5 pages)
  • HSPD-4: National Strategy to Combat Weapons of Mass Destruction, December 2002 (8 pages)
  • HSPD-5: Management of Domestic Incidents, February 28, 2003 (8 pages)
  • HSPD-6: Integration and Use of Screening Information, September 16, 2003 (2 pages)
  • HSPD-7: Critical Infrastructure Identification, Prioritization, and Protection, December 17, 2003 (9 pages)
  • HSPD-8: National Preparedness, December 17, 2003 (7 pages)
  • HSPD-9: Defense of United States Agriculture and Food, January 30, 2004 (weblink)
  • HSPD-10: Biodefense for the 21st Century, April 28, 2004 (weblink)
  • HSPD-11: Comprehensive Terrorist-Related Screening Procedures, August 27, 2004 (weblink)
  • HSPD-12: Policy for a Common Identification Standard for Federal Employees and Contractors, August 27, 2004 (weblink)
  • HSPD-13 / National Security Presidential Directive (NSPD)-41: Maritime Security Policy, December 21, 2004 (9 pages)
  • HSPD-14 / NSPD-43: Domestic Nuclear Detection, April 15, 2005 (4 pages)
  • HSPD-15 / NSPD-46: on the War on Terrorism, March 2006 (classified)
  • HSPD-16 / NSPD-47: Aviation Security Policy, June 22, 2006 (weblink)
  • HSPD-17, 2006 (classified)
  • HSPD-18: Medical Countermeasures against Weapons of Mass Destruction, January 31, 2007 (weblink)
  • HSPD-19: Combating Terrorist Use of Explosives in the United States, February 12, 2007 (weblink)
  • HSPD-20 / NSPD-51: National Continuity Policy, May 9, 2007 (weblink)
  • HSPD-21: Public Health and Medical Preparedness, October 18, 2007 (weblink)
  • HSPD-22: Domestic Chemical Defense (classified)
  • HSPD-23/NSPD-54: on computer network monitoring and cyber-security, January 8, 2008 (classified)
  • HSPD-24/NSPD-59: Biometrics for Identification and Screening to Enhance National Security, June 8, 2008 (weblink)

National-Level Reports

• National Incident Management System (NIMS)
  • Draft Revised National Incident Management System, August 2007 (176 pages)
  • National Incident Management System, March 1, 2004 (130 pages)
• National Infrastructure Protection Plan (NIPP)
• National Infrastructure Protection Plan, June 2006 (196 pages)
• Representatives of the 17 CI/KR sectors drafted Sector-Specific Plans (SSPs) to support the NIPP. A list of these SSPs, with links to those publicly available, can be found on the U.S. Department of Homeland Security website. The SSPs were released in May 2007, and will undergo future revision as appropriate.
• Draft National Infrastructure Protection Plan v 1.0 : Base Plan, November 2, 2005 (175 pages)
• Interim National Infrastructure Protection Plan, February 2005 (50 pages)
• National Response Plan (NRP) / National Response Framework (NRF)
  • National Response Framework, January 22, 2008 (90 pages)
  • National Response Framework Overview: ESF and Support Annexes, January 2008 (68 pages)
  • Draft National Response Framework, September 10, 2007 (84 pages)
  • Draft National Response Framework Overview: ESF and Support Annexes, September 10, 2007 (68 pages)
  • Draft National Response Framework Annexes (all), September 10, 2007 (385 pages)
  • Additional information on the National Response Framework can be found at the NRF Resource Center of the U.S. Department of Homeland Security, Federal Emergency Management Agency.
  • Notice of Change to the National Response Plan, May 25, 2006 (51 pages)
  • Quick Reference Guide for the National Response Plan, May 22, 2006 (27 pages)
  • National Response Plan, December 2004 (426 pages)
  • Draft National Response Plan (Initial Plan), October 10, 2003 (57 pages)
• National Strategies
  • Fact Sheet: National Strategy for Information Sharing, October 31, 2007 (weblink)
  • National Strategy for Information Sharing, October 2007 (48 pages)
  • Fact Sheet: National Strategy for Homeland Security, October 9, 2007 (weblink)
  • National Strategy for Homeland Security (updated), October 2007 (62 pages)
  • National Strategy for Aviation Security, March 26, 2007 (29 pages)
  • National Strategy for Combating Terrorism (updated), September 2006 (29 pages)
  • Fact Sheet: National Strategy to Internationalize Efforts Against Kleptocracy, August 2006 (4 pages; weblink)
  • National Strategy for Pandemic Influenza: Implementation Plan, May 2006 (233 pages)
  • The National Security Strategy of the United States of America (updated), March 2006 (54 pages)
  • National Strategy for Victory in Iraq, November 2005 (38 pages)
  • National Strategy for Pandemic Influenza, November 2005 (17 pages)
  • The National Strategy for Maritime Security, September 2005 (31 pages)
  • National Strategy for Combating Terrorism, February 2003 (32 pages)
  • The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets, February 2003 (96 pages)
  • The National Strategy to Secure Cyberspace, February 2003 (76 pages)
  • National Strategy to Combat Weapons of Mass Destruction, December 2002 (9 pages)
  • The National Security Strategy of the United States of America, September 2002 (35 pages)
  • National Strategy for Homeland Security, July 2002 (90 pages)
• Other Executive Branch Reports
  • Report of the President of the United States on the Status of Federal Critical Infrastructure Protection Activities, January 2001 (209 pages)
  • Defending America's Cyberspace: National Plan for Information Systems Protection Version 1.0 An Invitation to a Dialogue, 2000 (199 pages)

Legislation

• H.R. 5005: Homeland Security Act of 2002, November 25, 2002 (187 pages)
• H.R. 3162: USA PATRIOT Act, October 24, 2001 (342 pages)

Congressional Research Service (CRS) Reports

• Critical Infrastructures: Background, Policy, and Implementation, John D. Moteff, Specialist in Science and Technology Policy, Resources, Science, and Industry Division, Updated March 13, 2007 (34 pages)
• The Department of Homeland Security’s Risk Assessment Methodology: Evolution, Issues, and Options for Congress, Todd Masse, Specialist in Domestic Intelligence and Counterterrorism, Domestic Social Policy Division, Siobhan O’Neil, Analyst in Domestic Security and Intelligence, Domestic Social Policy Division, John Rollins, Specialist in Terrorism and International Crime, Foreign Affairs, Defense, and Trade Division, February 2, 2007 (33 pages)
• Vulnerability of Concentrated Critical Infrastructure: Background and Policy Options, Paul W. Parfomak, Specialist in Science and Technology, Resources, Science, and Industry Division, Updated January 26, 2007 (24 pages)
• State and Urban Area Homeland Security Plans and Exercises: Issues for the 110th Congress, Shawn Reese, Analyst in American National Government, Government and Finance Division, Updated January 3, 2007 (5 pages)
• Critical Infrastructure: The National Asset Database, John Moteff, Specialist in Science and Technology Policy, Resources, Science, and Industry Division, September 14, 2006 (17 pages)
• Homeland Security Intelligence: Perceptions, Statutory Definitions, and Approaches, Todd Masse, Specialist in Domestic Intelligence and Counterterrorism, Domestic Social Policy, August 18, 2006 (26 pages)
• Federal Disaster Recovery Programs: Brief Summaries, Mary Jordan, Information Research Specialist, Knowledge Services Group, Updated August 29, 2005 (13 pages)
• Risk Management and Critical Infrastructure Protection: Assessing, Integrating, and Managing Threats, Vulnerabilities and Consequences, John Moteff, Specialist in Science and Technology Policy, Resources, Science, and Industry Division, Updated February 4, 2005 (28 pages)
• Homeland Security Advisory System: Possible Issues for Congressional Oversight, Shawn Reese, Analyst in American National Government, Government and Finance Division, Updated January 11, 2005 (20 pages)
• Information Sharing for Homeland Security: A Brief Overview, Harold C. Relyea, Specialist in American National Government, Government and Finance Division, Jeffrey W. Seifert, Analyst in Information Science and Technology Policy, Resources, Science, and Industry Division, Updated January 10, 2005 (38 pages)
• Critical Infrastructure: Control Systems and the Terrorist Threat, Dana A. Shea, Analyst in Science and Technology Policy, Resources, Science, and Industry Division, Updated January 20, 2004 (22 pages)
• Emergency Preparedness and Response Directorate of the Department of Homeland Security, Keith Bea, William Krouse, Daniel Morgan, Wayne Morrissey, and C. Stephen Redhead, Congressional Research Service, Updated June 25, 2003 (6 pages)
• Critical Infrastructures: What Makes an Infrastructure Critical? John Moteff, Claudia Copeland, and John Fischer, Resources, Science, and Industry Division, Updated January 29, 2003 (20 pages)

U.S. Government Accountability Office (GAO) Reports

• Critical Infrastructure Protection: Sector Plans and Sector Councils Continue to Evolve, July 10, 2007 (20 pages)
• Defense Infrastructure: Actions Needed to Guide DOD’s Efforts to Identify, Prioritize, and Assess Its Critical Infrastructure, May 2007 (48 pages)
• Homeland Security: Progress Has Been Made to Address the Vulnerabilities Exposed by 9/11, but Continued Federal Action is Needed to Further Mitigate Security Risks, January 2007 (120 pages)
• Critical Infrastructure Protection: Progress Coordinating Government and Private Sector Efforts Varies by Sectors’ Characteristics, October 2006 (68 pages)
• Homeland Security: Recommendations to Improve Management of Key Border Security Program Need to Be Implemented, February 2006 (88 pages)
• Executive Summary of: Critical Infrastructure Protection: Department of Homeland Security Faces Challenges in Fulfilling Cybersecurity Responsibilities, May 2005 (1 page)
• Critical Infrastructure Protection: Department of Homeland Security Faces Challenges in Fulfilling Cybersecurity Responsibilities, May 2005 (78 pages)
• Critical Infrastructure Protection: Improving Information Sharing with Infrastructure Sectors, July 2004 (69 pages)
• Technology Assessment: Cybersecurity for Critical Infrastructure Protection, May 2004 (223 pages)

9/11 Commission Reports

• The 9/11 Commission Report: Executive Summary (34 pages)
• The 9/11 Commission Report (585 Pages)
• 9/11 Commission Recommendations: Implementation Status, Congressional Research Service, Richard F. Grimmett, Coordinator Specialist in National Defense, Foreign Affairs, Defense, and Trade Division, December 4, 2006 (73 pages)