phase begins. Incident Response is the fifth phase of the CIP life cycle. The purpose of the Incident Response phase is to eliminate the cause or source of an infrastructure event. For example, during the 9/11 attacks on the World Trade Center and Pentagon, all non-military airplanes were grounded over the United States to prevent further incidents. Response activities included emergency measures, not from the asset owners or operators, but from dedicated third parties such as law enforcement, medical rescue, fire rescue, hazardous material or explosives handling, and investigative agencies. Response to Defense Infrastructure incidents can take one of two paths depending on whether or not the event affects a DoD computer network. When incidents compromise a DoD computer network, the Joint Task Force-Computer Network Operations (JTF-CNO) directs the response activities. These activities are designed to stop the computer network attack, contain and mitigate damage to a DoD information network and then restore minimum required functionality. JTF-CNO also requests and coordinates any support or assistance from other Federal agencies and civilian organizations during incidents affecting a DoD network. When incidents impact any other DoD owned assets, installation commanders and critical asset owners follow traditional channels and procedures to coordinate responses. This includes notifying affected Sector Chief Infrastructure Assurance Officers, or CIAOs, in the initial notice and status reporting. Although third parties play a major role in the response to Defense Infrastructure events, DoD CIP personnel also have responsibilities to fulfill. Phase 6: Reconstitution After the source or cause of an infrastructure event is eliminated or contained, the infrastructure and its capabilities must be restored. Reconstitution is the last phase of the critical infrastructure protection. Reconstitution is probably the most challenging and least developed process of the life cycle. DoD critical asset owners have the major responsibility for reconstitution. See also Richard A. Clarke, Former Special Advisor to the President for Counterterrorism, Cybersecurity, and Critical Infrastructure Protection Proactive cyber defence to protect critical information infrastructures Presidential Decision Directive 62 North American Electric Reliability Corporation (NERC) Critical Foreign Dependencies Initiative Economic terrorism High-voltage transformer fire barriers References External links Anderson, K. "Intelligence-Based Threat Assessments for Information Networks and Infrastructures: A White Paper". Strategy to Secure Cyberspace Critical Infrastructure Protection Program, George Mason University "Critical Infrastructure: Homeland Security and Emergency Preparedness" Infracritical Critical Infrastructure Protection Review Centre for the Protection of National Infrastructure (United Kingdom) "Water Infrastructure Security Enhancements" draft national standards Terrorism