GAO releases report regarding defense support of civil authorities during cyber incidents

The Government Accountability Office (GAO) released a report on Tuesday regarding various elements of the Defense Support of Civil Authorities (DSCA) and their responsibilities during cyber incidents.

According to the Department of Defense’s (DoD) 2013 Strategy for Homeland Defense and Defense Support of Civil Authorities, the DoD must be prepared to support civil authorities in all domains, including cyberspace, and recognize that the department plays a crucial role in supporting a national effort to confront cyber threats to critical infrastructure. The report also assesses the extent to which the DoD has developed guidance that clearly defines the roles and responsibilities for providing support to civil authorities in response to a cyber incident.

The GAO found that DoD officials had limitations of current guidance to direct the department’s efforts in supporting civil authorities in a cyber incident and discussed the need for clarified guidance on roles and responsibilities.

The report recommended that the secretary of defense direct the under secretary of defense for policy in coordination with the chairman of the Joint Chiefs of Staff to issue or update guidance that clarifies the roles and responsibilities for relevant entities and officials, supporting commands and a dual-status commander to support civil authorities as needed for future cyber incidents.