Cybersecurity Information Sharing Act of 2015 Final Guidance Documents-Notice of Availability, 39061-39062 [2016-13742]

Download as PDF Federal Register / Vol. 81, No. 115 / Wednesday, June 15, 2016 / Notices Dated: June 10, 2016. David C. Barata, Captain, U.S. Coast Guard, Acting Director, Marine Transportation Systems. [FR Doc. 2016–14154 Filed 6–14–16; 8:45 am] BILLING CODE 9110–04–P DEPARTMENT OF HOMELAND SECURITY Federal Emergency Management Agency [Docket ID FEMA–2016–0011] Individuals and Households Program Unified Guidance Federal Emergency Management Agency, DHS. ACTION: Notice. AGENCY: The Federal Emergency Management Agency (FEMA) is accepting comments on the Individuals and Households Program Unified Guidance. SUMMARY: Comments must be received by August 1, 2016. ADDRESSES: Comments must be identified by docket ID FEMA–2016– 0011 and may be submitted by one of the following methods: Federal eRulemaking Portal: https:// www.regulations.gov. Follow the instructions for submitting comments. Please note that this proposed policy is not a rulemaking and the Federal Rulemaking Portal is being utilized only as a mechanism for receiving comments. Mail: Regulatory Affairs Division, Office of Chief Counsel, Federal Emergency Management Agency, 8NE, 500 C Street SW., Washington, DC 20472–3100. FOR FURTHER INFORMATION CONTACT: Johnathan Torres, Individual Assistance Division, Federal Emergency Management Agency, 500 C Street SW., Washington, DC 20472, (202–212–1079) or (FEMA-IHPUG-Comments@ fema.dhs.gov). DATES: ehiers on DSK5VPTVN1PROD with NOTICES SUPPLEMENTARY INFORMATION: I. Public Participation Instructions: All submissions received must include the agency name and docket ID. Regardless of the method used for submitting comments or material, all submissions will be posted, without change, to the Federal eRulemaking Portal at https:// www.regulations.gov, and will include any personal information you provide. Therefore, submitting this information makes it public. You may wish to read the Privacy Act notice, which can be viewed by clicking on the ‘‘Privacy VerDate Sep<11>2014 15:15 Jun 14, 2016 Jkt 238001 Notice’’ link in the footer of www.regulations.gov. You may submit your comments and material by the methods specified in the ADDRESSES section. Please submit your comments and any supporting material by only one means to avoid the receipt and review of duplicate submissions. Docket: The proposed guidance is available in docket ID FEMA–2016– 0011. For access to the docket to read background documents or comments received, go to the Federal eRulemaking Portal at https://www.regulations.gov and search for the docket ID. Submitted comments may also be inspected at FEMA, Office of Chief Counsel, 8NE, 500 C Street SW., Washington, DC 20472. II. Background FEMA is requesting comment on its proposed Individuals and Households Program Unified Guidance describing the policies for the Individuals and Households Program. The proposed guidance compiles FEMA policy for each type of assistance under the Individuals and Households Program into one comprehensive document and is intended to serve as a singular resource for States, Territorial, Indian Tribal Governments, and other entities who assist disaster survivors with postdisaster recovery. The proposed guidance does not have the force or effect of law. FEMA seeks comment on the proposed guidance, which is available online at https://www.regulations.gov in docket ID FEMA–2016–0011. Based on the comments received, FEMA may make appropriate revisions to the proposed guidance. Although FEMA will consider any comments received in the drafting of the final guidance, FEMA will not provide a response to comments document. When or if FEMA issues final guidance, FEMA will publish a notice of availability in the Federal Register and make the final guidance available at https:// www.regulations.gov. The final guidance would not have the force or effect of law. Authority: 42 U.S.C. 5174. Matthew Payne, Director of the Policy Division, Office of Policy and Program Analysis, Federal Emergency Management Agency. [FR Doc. 2016–14118 Filed 6–14–16; 8:45 am] BILLING CODE 9111–23–P PO 00000 Frm 00041 Fmt 4703 Sfmt 4703 39061 DEPARTMENT OF HOMELAND SECURITY Cybersecurity Information Sharing Act of 2015 Final Guidance Documents— Notice of Availability National Protection and Programs Directorate, DHS. ACTION: Notice of availability. AGENCY: DHS is announcing the availability of Cybersecurity Information Sharing Act of 2015 (CISA) Final Guidance Documents jointly issued with the Department of Justice (DOJ) in compliance with the Act, which authorizes the voluntary sharing and receiving of cyber threat indicators and defensive measures for cybersecurity purposes, consistent with certain protections, including privacy and civil liberty protections. ADDRESSES: The CISA final guidance documents may be found on www.uscert.gov/ais. FOR FURTHER INFORMATION CONTACT: If you have questions about this notice, email cisaimplementation@hq.dhs.gov or call Matthew Shabat at (703) 235– 5338. Questions may also be directed by mail to Matthew Shabat, 245 Murray Lane SW., Mail Stop 0610, Washington, DC 20528–0610. SUPPLEMENTARY INFORMATION: The CISA requires the Secretary of DHS and the Attorney General to jointly develop and make publicly available— • guidance to assist non-Federal entities and promote sharing of cyber threat indicators with the Federal Government; • interim and final guidelines for the protection of privacy and civil liberties; and • interim and final procedures related to the receipt of cyber threat indicators and defensive measures by the Government, which happen principally through the existing DHS-operated Automated Indicator Sharing (AIS) initiative, web form and email communications to DHS, and through direct submissions to Federal agencies. SUMMARY: Authority and Background On December 18, 2015, the President signed into law the Consolidated Appropriations Act, 2016, Public Law 114–113, which included at Division N, Title I the Cybersecurity Information Sharing Act of 2015 (CISA). Congress designed CISA to establish a voluntary cybersecurity information sharing process that encourages public and private sector entities to share cyber threat indicators and defensive measures while protecting privacy and civil liberties. The CISA requires E:\FR\FM\15JNN1.SGM 15JNN1 39062 Federal Register / Vol. 81, No. 115 / Wednesday, June 15, 2016 / Notices various Executive Branch agencies to coordinate and create, within 60 days of enactment (i.e., not later than February 16, 2016), four guidance documents to facilitate this voluntary cybersecurity information sharing process. The CISA also requires the final versions of two of these documents to be issued and made publicly available within 180 days of enactment (i.e., not later than June 15, 2016). See generally Public Law 114– 113, Div. N, Title I secs. 103, 105). ehiers on DSK5VPTVN1PROD with NOTICES Overview of the 180 Day Guidance Required Under CISA The Cybersecurity Information Sharing Act sec. 105(a)(2) requires the Secretary of DHS and the Attorney General, in consultation with the heads of designated Federal entities,1 to jointly develop and issue interim (within 60 days of enactment) and final (within 180 days of enactment) policies and procedures relating to the receipt of cyber threat indicators and defensive measures by the Federal Government. These internal operational procedures describe general rules applicable to DHS and other Federal agencies and the operative processes of the DHS AIS system, including the statutory requirement for Federal agencies that receive cyber threat indicators and defensive measures to share them with other appropriate agencies. DHS and DOJ updated this guidance. Section 105(b) of the CISA requires the Secretary of Homeland Security and the Attorney General, in consultation with the Department Heads and Chief Privacy and Civil Liberty Officers of the designated Federal entities and such private entities with industry expertise as the Attorney General and the Secretary consider relevant, to jointly develop and make publicly available interim (within 60 days of enactment) and final (within 180 days of enactment) guidelines relating to privacy and civil liberties that govern the receipt, retention, use, and dissemination of cyber threat indicators by a Federal entity. These privacy and civil liberties guidelines are consistent with the Fair Information Practice Principles (FIPPs) set forth in Appendix A of the ‘‘National Strategy for Trusted Identities in Cyberspace,’’ published by the President in April 2011. DHS and DOJ updated this guidance based on feedback from within the Federal Government, the privacy advocacy community, and other relevant private entities. 1 The CISA defines Appropriate Federal Entities as the Departments of Commerce, Defense, Energy, Homeland Security, Justice, Treasury, and the Office of the Director of National Intelligence. See CISA sec. 102(3). VerDate Sep<11>2014 15:15 Jun 14, 2016 Jkt 238001 Overview of Updates to Non-Federal Entity Sharing Guidelines Section 105(a)(4) of the CISA requires the Secretary of Homeland Security and the Attorney General to jointly develop and make publicly available guidance to assist non-Federal entities with sharing cyber threat indicators with Federal entities. This guidance includes explanations of how non-Federal entities can identify and share cyber threat indicators and defensive measures with the Federal Government in accordance with CISA and describes the protections non-Federal entities receive under CISA for sharing cyber threat indicators and defensive measures, including targeted liability protection and other statutory protections. As required by CISA, DHS initially made this guidance available on February 16, 2016 at www.uscert.gov/ais. Based on stakeholder input and feedback, DHS and DOJ have further updated this guidance. Issuance of Agency Guidance Required Under CISA The CISA-mandated final procedures and guidance, as well as an updated version of the non-federal entity sharing guidance, may be found at www.uscert.gov/ais. Dated: June 6, 2016. Andy Ozment, Assistant Secretary, Department of Homeland Security. [FR Doc. 2016–13742 Filed 6–14–16; 8:45 am] BILLING CODE 9110–9P–P DEPARTMENT OF THE INTERIOR Fish and Wildlife Service [FWS–R8–ES–2016–N095; FXES11120800000–167–FF08ECAR00] Endangered and Threatened Wildlife and Plants; Incidental Take Permit Application; Proposed Low-Effect Habitat Conservation Plan and Associated Documents; Community of San Pedro, City of Los Angeles, California Fish and Wildlife Service, Interior. ACTION: Notice of availability; request for comments. AGENCY: We, the U.S. Fish and Wildlife Service (Service), have received an application from Rolling Hills Preparatory School (applicant) for a 25year incidental take permit for the endangered Palos Verdes blue butterfly pursuant to the Endangered Species Act of 1973, as amended (Act). We are SUMMARY: PO 00000 Frm 00042 Fmt 4703 Sfmt 4703 requesting comments on the permit application and on the preliminary determination that the proposed Habitat Conservation Plan qualifies as a ‘‘loweffect’’ Habitat Conservation Plan, eligible for a categorical exclusion under the National Environmental Policy Act (NEPA) of 1969, as amended. The basis for this determination is discussed in the environmental action statement (EAS) and the associated low-effect screening form, which are also available for public review. DATES: Written comments should be received on or before July 15, 2016. ADDRESSES: Submitting Comments: You may submit comments by one of the following methods: • U.S. Mail: Field Supervisor, Fish and Wildlife Service, Carlsbad Fish and Wildlife Office, 2177 Salk Avenue, Suite 250, Carlsbad, CA 92008. • Fax: Field Supervisor, 760–431– 9624. Obtaining Documents: To request copies of the application, proposed HCP, and EAS, contact the Service immediately, by telephone at 760–431– 9440 or by letter to the Carlsbad Fish and Wildlife Office (see ADDRESSES). Copies of the proposed HCP and EAS also are available for public inspection during regular business hours at the Carlsbad Fish and Wildlife Office (see ADDRESSES). Ms. Karen Goebel, Assistant Field Supervisor, Carlsbad Fish and Wildlife Office (see ADDRESSES); telephone: 760– 431–9440. If you use a telecommunications device for the deaf (TDD), please call the Federal Information Relay Service (FIRS) at 800–877–8339. SUPPLEMENTARY INFORMATION: We, the U.S. Fish and Wildlife Service (Service), have received an application from Rolling Hills Preparatory School (applicant) for a 25-year incidental take permit for one covered species pursuant to section 10(a)(1)(B) of the Endangered Species Act of 1973, as amended (16 U.S.C. 1531 et seq., Act). The application addresses the potential ‘‘take’’ of the endangered Palos Verdes blue butterfly (Glaucopsyche lygdamus palosverdesensis) in the course of activities associated with the construction of educational facilities and active habitat management for the Palos Verdes blue butterfly, in the Community of San Pedro, City of Los Angeles, Los Angeles County, California. A conservation program to avoid, minimize, and mitigate for project activities would be implemented as described in the proposed Habitat FOR FURTHER INFORMATION CONTACT: E:\FR\FM\15JNN1.SGM 15JNN1

Agencies

[Federal Register Volume 81, Number 115 (Wednesday, June 15, 2016)]
[Notices]
[Pages 39061-39062]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2016-13742]


-----------------------------------------------------------------------

DEPARTMENT OF HOMELAND SECURITY


Cybersecurity Information Sharing Act of 2015 Final Guidance 
Documents--Notice of Availability

AGENCY: National Protection and Programs Directorate, DHS.

ACTION: Notice of availability.

-----------------------------------------------------------------------

SUMMARY: DHS is announcing the availability of Cybersecurity 
Information Sharing Act of 2015 (CISA) Final Guidance Documents jointly 
issued with the Department of Justice (DOJ) in compliance with the Act, 
which authorizes the voluntary sharing and receiving of cyber threat 
indicators and defensive measures for cybersecurity purposes, 
consistent with certain protections, including privacy and civil 
liberty protections.

ADDRESSES: The CISA final guidance documents may be found on www.us-cert.gov/ais.

FOR FURTHER INFORMATION CONTACT: If you have questions about this 
notice, email cisaimplementation@hq.dhs.gov or call Matthew Shabat at 
(703) 235-5338. Questions may also be directed by mail to Matthew 
Shabat, 245 Murray Lane SW., Mail Stop 0610, Washington, DC 20528-0610.

SUPPLEMENTARY INFORMATION: The CISA requires the Secretary of DHS and 
the Attorney General to jointly develop and make publicly available--
     guidance to assist non-Federal entities and promote 
sharing of cyber threat indicators with the Federal Government;
     interim and final guidelines for the protection of privacy 
and civil liberties; and
     interim and final procedures related to the receipt of 
cyber threat indicators and defensive measures by the Government, which 
happen principally through the existing DHS-operated Automated 
Indicator Sharing (AIS) initiative, web form and email communications 
to DHS, and through direct submissions to Federal agencies.

Authority and Background

    On December 18, 2015, the President signed into law the 
Consolidated Appropriations Act, 2016, Public Law 114-113, which 
included at Division N, Title I the Cybersecurity Information Sharing 
Act of 2015 (CISA). Congress designed CISA to establish a voluntary 
cybersecurity information sharing process that encourages public and 
private sector entities to share cyber threat indicators and defensive 
measures while protecting privacy and civil liberties. The CISA 
requires

[[Page 39062]]

various Executive Branch agencies to coordinate and create, within 60 
days of enactment (i.e., not later than February 16, 2016), four 
guidance documents to facilitate this voluntary cybersecurity 
information sharing process. The CISA also requires the final versions 
of two of these documents to be issued and made publicly available 
within 180 days of enactment (i.e., not later than June 15, 2016). See 
generally Public Law 114-113, Div. N, Title I secs. 103, 105).

Overview of the 180 Day Guidance Required Under CISA

    The Cybersecurity Information Sharing Act sec. 105(a)(2) requires 
the Secretary of DHS and the Attorney General, in consultation with the 
heads of designated Federal entities,\1\ to jointly develop and issue 
interim (within 60 days of enactment) and final (within 180 days of 
enactment) policies and procedures relating to the receipt of cyber 
threat indicators and defensive measures by the Federal Government. 
These internal operational procedures describe general rules applicable 
to DHS and other Federal agencies and the operative processes of the 
DHS AIS system, including the statutory requirement for Federal 
agencies that receive cyber threat indicators and defensive measures to 
share them with other appropriate agencies. DHS and DOJ updated this 
guidance.
---------------------------------------------------------------------------

    \1\ The CISA defines Appropriate Federal Entities as the 
Departments of Commerce, Defense, Energy, Homeland Security, 
Justice, Treasury, and the Office of the Director of National 
Intelligence. See CISA sec. 102(3).
---------------------------------------------------------------------------

    Section 105(b) of the CISA requires the Secretary of Homeland 
Security and the Attorney General, in consultation with the Department 
Heads and Chief Privacy and Civil Liberty Officers of the designated 
Federal entities and such private entities with industry expertise as 
the Attorney General and the Secretary consider relevant, to jointly 
develop and make publicly available interim (within 60 days of 
enactment) and final (within 180 days of enactment) guidelines relating 
to privacy and civil liberties that govern the receipt, retention, use, 
and dissemination of cyber threat indicators by a Federal entity. These 
privacy and civil liberties guidelines are consistent with the Fair 
Information Practice Principles (FIPPs) set forth in Appendix A of the 
``National Strategy for Trusted Identities in Cyberspace,'' published 
by the President in April 2011. DHS and DOJ updated this guidance based 
on feedback from within the Federal Government, the privacy advocacy 
community, and other relevant private entities.

Overview of Updates to Non-Federal Entity Sharing Guidelines

    Section 105(a)(4) of the CISA requires the Secretary of Homeland 
Security and the Attorney General to jointly develop and make publicly 
available guidance to assist non-Federal entities with sharing cyber 
threat indicators with Federal entities. This guidance includes 
explanations of how non-Federal entities can identify and share cyber 
threat indicators and defensive measures with the Federal Government in 
accordance with CISA and describes the protections non-Federal entities 
receive under CISA for sharing cyber threat indicators and defensive 
measures, including targeted liability protection and other statutory 
protections. As required by CISA, DHS initially made this guidance 
available on February 16, 2016 at www.us-cert.gov/ais. Based on 
stakeholder input and feedback, DHS and DOJ have further updated this 
guidance.

Issuance of Agency Guidance Required Under CISA

    The CISA-mandated final procedures and guidance, as well as an 
updated version of the non-federal entity sharing guidance, may be 
found at www.us-cert.gov/ais.

    Dated: June 6, 2016.
Andy Ozment,
Assistant Secretary, Department of Homeland Security.
[FR Doc. 2016-13742 Filed 6-14-16; 8:45 am]
 BILLING CODE 9110-9P-P
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.