Enhanced Cybersecurity Services Program Privacy Compliance Review

The Enhanced Cybersecurity Services Program (ECS) is a voluntary Department of Homeland Security (DHS) program in which the National Protection and Programs Directorate’s (NPPD) Cybersecurity and Communications provides indicators of malicious cyber activity to participating commercial service providers. The purpose of the program is to assist the owners and operators of critical infrastructure in enhancing their ability to protect their systems from unauthorized access, exploitation, or data exfiltration through a voluntary information sharing program.  In performing the Privacy Compliance Review (PCR), the DHS Privacy Office found that NPPD developed the ECS Program and its related processes with privacy-protective objectives in mind. NPPD continues to operate the ECS Program and its related processes with strong privacy oversight, which allows NPPD to identify and mitigate privacy risks as the program evolves and matures.