The National Cyber Incident Response Plan (NCIRP)

This section of the website provides information on the NCIRP public engagement period. The intended audience for this section is the whole of Nation, which includes individuals, the private sector, and Federal, State, local, tribal, and territorial governments.

About the NCIRP

DHS’s National Protection and Programs Directorate and Federal Emergency Management Agency (FEMA) National Integration Center are leading the development of this document, in coordination with the Department of Justice, the Secretary of Defense, and the Sector Specific Agencies and other interagency partners, representatives from the 16 critical infrastructure sectors and state and local governments. 

The draft NCIRP:

• Will describe a nation-wide approach to cyber incidents, to talk about the important role that private sector entities, States, and multiple federal agencies play in responding to cyber incidents and how those activities all fit together;
• Reflects and incorporates lessons learned from exercises, real world incidents and policy updates, such as the Presidential Policy Directive/PPD-41: U.S. Cyber Incident Coordination, and the National Cybersecurity Protection Act of 2014.

The NCIRP will also serve as the Cyber Annex to the Federal Interagency Operational Plan (FIOP) that built upon the National Planning Frameworks and the National Preparedness System.

DHS is currently soliciting public feedback for the NCIRP refresh. This National Engagement Period will conclude at 5:00 pm EDT on October 31, 2016. National engagement provides an opportunity for interested parties to comment on the draft of the refreshed NCIRP, so that it reflects the collective expertise and experience of the whole community in response to cyber incidents.

Download the draft version of the refreshed NCIRP and feedback matrix here.

• DRAFT National Cyber Incident Response Plan (PDF | 490 KB)
• NCIRP Feedback Matrix (XLSX | 266 KB)

To ensure all feedback is properly handled, reviewers should submit feedback and recommendations using the submission form, to FEMA-NCIRP-engagement@fema.dhs.gov NLT 5:00 pm EDT on October 31, 2016.

DHS is hosting a series of 60-minute engagement webinars to highlight key proposed changes to the NCIRP and answer participant questions about submitting feedback. All webinars are open to the whole community. To register, please visit the web links listed below.

NCIRP Webinar Information