ExecutiveOrdersEO
Memo 13636MemorandumObama · D Quiet signal

Presidential Memorandum 13636

Establishment of the Cyber Threat Intelligence Integration Center

This memorandum directs the Director of National Intelligence to establish the Cyber Threat Intelligence Integration Center (CTIIC), a new intelligence organization to coordinate analysis and sharing of foreign cyber threat intelligence across federal agencies. The CTIIC is tasked with integrating all-source analysis, supporting existing cyber centers, developing intelligence sharing capabilities, and coordinating interagency responses to foreign cyber threats, with a goal of reaching full operating capability by the end of fiscal year 2016.

Federal Register Open PDF 80 FR 11317

Impact dates

  1. CTIIC to reach full operating capability

  2. DNI status report on CTIIC establishment due to OMB Director and Assistant to the President for Homeland Security and Counterterrorism

Key directives

  • DNI shall establish the Cyber Threat Intelligence Integration Center (CTIIC)
  • Agencies shall support DNI's efforts including providing personnel and resources
  • CTIIC shall provide integrated all-source analysis of foreign cyber threat intelligence
  • CTIIC shall support NCCIC, NCIJTF, U.S. Cyber Command, and other relevant entities
  • CTIIC shall oversee development of intelligence sharing capabilities including systems, programs, policies, and standards
  • CTIIC shall downgrade indicators of malicious cyber activity to lowest classification possible for distribution
  • CTIIC shall facilitate interagency coordinated plans to counter foreign cyber threats using all instruments of national power
  • Agencies shall provide CTIIC with all intelligence related to foreign cyber threats or cyber incidents affecting U.S. national interests
  • DNI shall provide status report within 90 days to OMB Director and Assistant to the President for Homeland Security and Counterterrorism

Who is ordered

Timeline

Immediate

  • DNI directed to establish CTIIC
  • Agencies directed to provide support including personnel and resources

Near term (90d)

  • DNI must provide status report on CTIIC establishment to OMB Director and Assistant to the President for Homeland Security and Counterterrorism

Long term

  • CTIIC to reach full operating capability by end of fiscal year 2016 (September 30, 2016)

Risks & tensions

  • Potential overlap with existing cyber centers (NCCIC, NCIJTF, USCYBERCOM) requires careful mission delineation
  • Privacy and civil liberties protections are mandated but operational details are vague
  • Subject to availability of appropriations creates funding uncertainty
  • Intelligence sharing with private sector depends on successful classification downgrading
  • Interagency coordination burden may slow implementation
Presidential Memorandum 13636: Establishment of the Cyber Threat Intelligence Integration Center · Executive Orders