The Incident Management Program combines multiple Departmental incident-related services into a joint capability that focuses on threat information sharing, critical infrastructure protection, active defense and incident preparedness. The Incident Management program reports incidents to United States Computer Emergency Readiness Team (US-CERT), fulfilling statutory requirements and ensuring a coordinated response to cyber attacks.
Joint Cybersecurity Coordination Center (JC3)
JC3 provides the U.S. Department of Energy with incident response, reporting, and tracking, along with other computer security support. JC3 is a member of GFIRST, the Government Forum of Incident Responders and Security Teams and FIRST an international incident response and security organization. DOE O 205.1B Chg 2 requires that all Department of Energy elements, the National Nuclear Security Administration (NNSA), Program Secretarial Offices, and other DOE organizations which have access to DOE cyber systems report cyber security incidents to JC3. JC3 Bulletins are distributed to the DOE community to notify sites of computer security vulnerabilities and recommended actions.
Latest JC3 Bulletins
-
May 17, 2013
Multiple vulnerabilities have been reported in BlackBerry Tablet OS, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.
-
May 16, 2013
These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system
-
May 15, 2013
A vulnerability was reported in the Linux Kernel.