FCC Seeks Comments on Cybersecurity Risk Management and Best Practices Report

By Renee Dopplick, ACM Director of Public Policy
May 11, 2015

The FCC seeks public comments on the report on “Cybersecurity Risk Management and Best Practices” submitted by the FCC Communications Security, Reliability and Interoperability Council. The 415-page report involved 100+ cybersecurity professionals in a yearlong, multistakeholder effort to develop the first cybersecurity guidance for the communications sector, which includes the broadcasting, satellite, cable, wireless, and wireline industries.

The report provides sector-specific implementation guidance for the use and adaption of the NIST Cybersecurity Framework, a voluntary framework to help businesses and organizations involved in critical infrastructure sectors better manage and reduce cybersecurity risks.

The FCC particularly would like input on:

  1. How can the FCC better meet the goal of reducing cybersecurity risk to critical infrastructure, enterprises, and consumers?
  2. How should the Commission prepare for and conduct confidential company-specific meetings to ensure that they result in useful information?
  3. What measures should the Communications Sector Annual Report include to provide appropriate levels of visibility about the state of cybersecurity risk management over time?
  4. How should the FCC coordinate with DHS’ Critical Infrastructure Cyber Community C3 Voluntary Program?

Comments are due by May 29. Reply comments are due by June 26.