The Incident Management Program combines multiple Departmental incident-related services into a joint capability that focuses on threat information sharing, critical infrastructure protection, active defense and incident preparedness. The Incident Management program reports incidents to United States Computer Emergency Readiness Team (US-CERT), fulfilling statutory requirements and ensuring a coordinated response to cyber attacks.
Joint Cybersecurity Coordination Center (JC3)
JC3 provides the U.S. Department of Energy with incident response, reporting, and tracking, along with other computer security support. JC3 is a member of GFIRST, the Government Forum of Incident Responders and Security Teams and FIRST an international incident response and security organization. DOE O 205.1B Chg 2 requires that all Department of Energy elements, the National Nuclear Security Administration (NNSA), Program Secretarial Offices, and other DOE organizations which have access to DOE cyber systems report cyber security incidents to JC3. JC3 Bulletins are distributed to the DOE community to notify sites of computer security vulnerabilities and recommended actions.
Latest JC3 Bulletins
-
May 23, 2013
A vulnerability has been reported in Apache Struts, which can be exploited by malicious people to bypass certain security restrictions.
-
May 22, 2013
Asset and Service Mgmt Products - Potential security exposure when using JavaTM based applications due to vulnerabilities in Java Software Developer Kits.
-
May 21, 2013
Multiple vulnerabilities have been reported in Wireshark