Technological advances in  these networks have led to a convergence of the previously separate  networks used to transmit voice and data communications. Consequently, the tiger team task force recommended merging the two  centers to establish an integrated operations center and further  recommended that DHS adopt a three-step approach to integration of the  centers. In addition, with regard to involving key private sector critical  infrastructure officials in the new center, the task force recommended that  the department also appoint a project manager to lead this effort. DHS Has Completed the First of Its Three- Step Integration Approach, but Has Yet to Implement the Remaining Steps

DHS has taken the first of three steps toward integrating NCSD and NCS  by moving the two centers, NCC Watch and US-CERT, to adjacent office  space in November 2007. This close proximity allows the approximately 41  coordination center and 95 readiness team analysts to, among other things,  readily collaborate on planned and ongoing activities. In addition, the  centers have jointly acquired common software tools to identify and share  physical, telecommunications, and cyber information related to  performing their missions. For example, the centers use one of the tools to  develop a joint “morning report” specifying their respective security issues  and problems, which is used by the analysts in coordinating responses to  any resulting disruptions. With regard to involving key private sector officials to participate in the  proposed joint center, the department has not accomplished this step and  supporting actions either. A key factor contributing to DHS’s lack of progress in implementing these  steps is that completing the integration is not a top department priority. Instead, DHS officials stated that their efforts have been focused on other  initiatives, most notably the President’s recently announced cyber initiative,  which is a federal governmentwide effort to manage the risks associated with  the Internet’s nonsecure external connections. Officials from DHS’s Office of  Cyber Security and Communications stated that they are in the process of  drafting a strategic plan to provide overall direction for the activities of NCS  and NCSD, including completing the integration of the centers. However, the  plan is in draft and has been so since mid-2007. In addition, DHS officials  could not provide a date for when it would be finalized. Consequently, the  department does not have a strategic plan or related guidance that provides  overall direction in this area and has not developed specific tasks and  milestones for achieving the remaining two integration steps. Until DHS completes the integration of these two centers, it risks being  unable to efficiently plan for and respond to disruptions to communication  infrastructure, including voice and data networks, and the information  traveling on these networks, increasing the probability that  communications will be unavailable or limited in times of need. Conclusions

While DHS has taken initial steps toward integrating the key centers that  plan for and respond to disruptions to the communications infrastructure,  including voice and data networks, and the data and applications on these  networks, these offices are still not fully integrated as envisioned. Appendix I: Objective, Scope, and Methodology

Our objective was to determine the status of Department of Homeland  Security (DHS) efforts to integrate the activities of its National Cyber  Security Division (NCSD) and National Communications System (NCS) in  preparing for and responding to disruptions in converged voice and data  networks.
Why GAO Did This Study

Technological advances have led to an increasing convergence of previously separate networks used to transmit voice and data communications. While the benefits of this convergence are enormous, such interconnectivity also poses significant challenges to our nation's ability to respond to major disruptions. Two operations centers--managed by the Department of Homeland Security's (DHS) National Communications System and National Cyber Security Division--plan for and monitor disruptions on voice and data networks. In September 2007, a DHS expert task force made three recommendations toward establishing an integrated operations center that the department agreed to adopt. To determine the status of efforts to establish an integrated center, GAO reviewed documentation, interviewed relevant DHS and private sector officials, and reviewed laws and policies to identify DHS's responsibilities in addressing convergence.

What GAO Found

DHS has taken the first of three steps toward integrating its centers that are responsible for planning for, monitoring, and responding to disruptions to the communications infrastructure, including voice and data networks, and the security of data and applications that use these networks. Specifically, in November 2007, it moved the operations center for communications infrastructure (NCC Watch) to office space adjacent to the center for data and applications (US-CERT). This close proximity allows the approximately 41 coordination center and 95 readiness team analysts to, among other things, readily collaborate on planned and ongoing activities. In addition, the centers have jointly acquired common software tools to identify and share physical, telecommunications, and cyber information related to performing their missions. For example, the centers use one of the tools to develop a joint "morning report" specifying their respective network security issues and problems, which is used by the analysts in coordinating responses to any resulting disruptions. While DHS has completed the first integration step, it has yet to implement the remaining two steps. Specifically, although called for in the task force's recommendations, the department has not organizationally merged the two centers or invited key private sector critical infrastructure officials to participate in the planning, monitoring, and other activities of the proposed joint operations center. A key factor contributing to DHS's lack of progress in implementing the latter two steps is that completing the integration has not been a top DHS priority. Instead, DHS officials stated that their efforts have been focused on other initiatives, most notably the President's recently announced cyber initiative, which is a federal governmentwide effort to manage the risks associated with the Internet's nonsecure external connections. Nevertheless, DHS officials stated that they are in the process of drafting a strategic plan to provide overall direction for the activities of the National Communications System and the National Cyber Security Division. However, the plan is in draft and has been so since mid-2007. In addition, DHS officials could not provide a date for when it would be finalized. Consequently, the department does not have a strategic plan or related guidance that provides overall direction in this area and has not developed specific tasks and milestones for achieving the two remaining integration steps. Until DHS completes the integration of the two centers, it risks being unable to efficiently plan for and respond to disruptions to communications infrastructure and the data and applications that travel on this infrastructure, increasing the probability that communications will be unavailable or limited in times of need.