Space Education and Strategic Applications Journal
President Bush used his mandate to make some significant changes , President Obama made more , and the recent administration continued the trend through President Trump ’ s creation of the Cybersecurity and Infrastructure Security Agency ( CISA ). Change typically occurs at the point where an administration changes as well as several times during each administration depending on how internal and external pressures are applied .
The first , formal federal “ critical infrastructure ” definition was 1996 when President Clinton signed Executive Order 13010 ( Listes , 2018 ). In typical government fashion , EO 13010 designated 10 agencies to contribute to a commission who reported to a Principal committee in the National Security Council structure . The order identified eight critical areas as vulnerable to either physical or cyber-attacks ( Clinton , 1996 ). 1 The commission returned the report the following year and highlighted five sectors of each area most vulnerable to attack as ; information and communications , energy , banking and finance , physical distribution , and vital human services . Several vulnerability areas overlap sectors as CI although were not treated as a distinct area at the time .
Two years later , in 1998 , President Clinton signed Presidential Decision Directive 63 ( PDD-63 ). PDD-63 ’ s aimed to develop improved protection capacity for U . S . CI and marks the first time cyber was defined as a CI compo- nent . Further , PDD-63 designated federal agencies as lead for each specific sector in coordination with equivalent Sector Liaisons designated from private industry ( Clinton , Presidential Decision Directive / NSC-63 " Critical Infrastructure Protection , 1998 ). This proved to be a continuing bedrock concepts for today ’ s CI planning and will likely continue as vital for the space industry as large elements including launch and control shift into the private sector .
In 2001 , the 9 / 11 attacks redefined the how the U . S . government defined protection , and CI was no exception . The 2001 Patriot Act discussed the requirements for CI protection and information sharing while leaving out calling for any specific areas . The 2002 Homeland security act adds definitions for key resources which were then used to write the Homeland Security Presidential Directive -7 ( HSPD-7 ). Further , HSPD-7 reduces the CI sectors to five which were designated as information technology , telecommunications , chemical , transportation systems , emergency services and postal while including dams , government facilities , and commercial facilities as key resources . The directive adds several other requirements and coordination elements to homeland security including mandating the government responsible agents would liaise independently to each sector ’ s private institutions . The Department of Homeland Security was also designated as the agency to change , modify , or otherwise update CI any re-
1 The eight identified sectors were : telecommunications , electrical power systems , gas and oil storage and transportation , banking and finance , transportation , water supply systems , emergency services ( including medical , police , fire , and rescue ), and continuity of government .
58