PCII Program: Protected Critical Infrastructure Information - CISA
Quick Summary
- Protects sensitive infrastructure data.
- Enhances government-private sector sharing.
- Shields from public disclosure.
- Requires authorized user training.
- Supports national security efforts.
The Protected Critical Infrastructure Information (PCII) Program is a vital initiative from the U.S. Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA). It's designed to enhance the sharing of sensitive information between private sector owners and operators of critical infrastructure and the government. This digital portal ensures that voluntarily submitted data, crucial for national security, receives stringent protection from public disclosure. By safeguarding this critical infrastructure information, the PCII Program fosters trust and encourages open communication about potential threats and vulnerabilities. It creates a secure environment for collaboration, ultimately strengthening the resilience and security of essential systems nationwide. This program is instrumental in supporting homeland security efforts, including analysis, risk assessment, and recovery preparedness.
- 📋 Who Qualifies for PCII Program Access
- 📍 Accessing Your PCII Management System Account
- ⭐ Core Advantages of the PCII Information Sharing Program
- ⚠️ Resolving Access Challenges for Your PCII Account
- 🔒 Ensuring Data Integrity Within the PCII Framework
- 🎧 Official Help Desk Contacts
- ❓ Key Inquiries About Protected Critical Infrastructure Information
Who Qualifies for PCII Program Access
- To become a PCII Authorized User and access Protected Critical Infrastructure Information, you must be a federal, state, tribal, or local government employee or an authorized contractor.
- You need to have specific homeland security responsibilities that necessitate access to this sensitive information.
- Successful completion of required training on the proper handling and safeguarding of PCII is mandatory. This training must be renewed annually.
- All non-federal employees must sign a non-disclosure agreement to ensure the confidentiality of the protected data.
- Access to specific PCII content is granted based on a proven need-to-know, determined by the information holder or a relevant government official.
Accessing Your PCII Management System Account
- To access the PCII Management System (PCIIMS), navigate to the official login portal, often found via CISA's PCII Program page.
- Existing users with PCIIMS and OKTA accounts should click the LOGIN button.
- New users first need to complete the Registration process.
- For those needing to renew their annual training, log in to the PCIIMS website and locate the refresher training link on the main page. Email reminders will be sent as your expiration date approaches.
- If you are registering for the PCII Authorized User Training for the first time, you will select the 'New User' Authorized User training module after logging into the PCIIMS system.
Core Advantages of the PCII Information Sharing Program
- Information Protection: The program offers robust protection for voluntarily submitted critical infrastructure information (CII) from public disclosure.
- Exemption from Disclosure Laws: PCII is shielded from requests under the Freedom of Information Act (FOIA), as well as state, local, tribal, and territorial disclosure laws.
- Legal Safeguards: This protected information cannot be used in civil litigation or as a basis for regulatory actions.
- Enhanced Collaboration: It facilitates greater trust and information sharing between private sector entities and government partners for homeland security purposes.
- Analytical Utility: Government analysts utilize PCII for crucial activities like analyzing and securing critical infrastructure, identifying vulnerabilities, conducting risk assessments, and improving recovery preparedness.
Resolving Access Challenges for Your PCII Account
⚠️ Forgot Password or Login Issues
Cause: Users may encounter difficulties logging in, forgetting their password, or needing to change their username or email.
Solution: We know being locked out is stressful. For all technical issues, including registration, login, password resets, or username/email changes, immediately contact the CISA Gateway Consolidated Help Desk. You can reach them by emailing [email protected] or by calling 866-844-8163.
⚠️ Access to Training Difficulties
Cause: Users might face challenges accessing or completing the required PCII Authorized User Training.
Solution: If you experience problems with the registration process, accessing the Authorized User training, or obtaining your certificate, contact the CISA Gateway Consolidated Help Desk at [email protected] or 866-844-8163. If the site does not load, verify your browser's security settings (TLS and SSL options). PCIIMS generally performs best with Microsoft Internet Explorer.
⚠️ Account Inactivity or Deletion
Cause: Failure to renew annual PCII Authorized User training by the deadline leads to account inactivity and potential deletion.
Solution: PCII Authorized Users must renew their training annually. If the renewal deadline passes, your account becomes inactive for 30 days, during which you can still retake the training. After 30 days, the account is deleted, requiring re-registration within PCIIMS to regain access.
Ensuring Data Integrity Within the PCII Framework
- 🔒 Always ensure you are using an official, secure government website (look for .gov and HTTPS) when accessing PCII-related systems.
- 🔒 Only access PCII if you are a PCII Authorized User with a validated need-to-know and specific homeland security duties.
- 🔒 Complete and annually renew your PCII Authorized User training to stay compliant with handling and safeguarding requirements.
- 🔒 Adhere strictly to non-disclosure agreements, especially if you are a non-federal employee accessing PCII.
- 🔒 Be aware that all activity on U.S. Government computer systems, including PCIIMS, is subject to monitoring and recording. Unauthorized access can lead to severe penalties.
- 🔒 Do not process classified information on the PCIIMS system, as it is strictly for unclassified critical infrastructure information.
🎧 Official Support & Help Center
For general inquiries about the PCII Program, contact [email protected]. For all technical issues, including registration, training, login, password resets, or username/email changes, reach out to the CISA Gateway Consolidated Help Desk at [email protected] or call 866-844-8163.
Key Inquiries About Protected Critical Infrastructure Information
Q: What does Protected Critical Infrastructure Information (PCII) mean?
PCII refers to sensitive critical infrastructure information voluntarily shared with the U.S. government, specifically the Department of Homeland Security (DHS) and CISA. This information is validated and protected from public disclosure under federal law.
Q: What types of information qualify for PCII submission?
PCII includes details about the security of critical infrastructure, such as vulnerabilities, threats, system specifications, and related analyses. It covers information necessary for security analysis, recovery efforts, and interdependency studies, along with any contextual materials.
Q: How is Protected Critical Infrastructure Information (PCII) safeguarded from disclosure?
PCII is protected by federal regulations, which restrict its sharing and mandate specific handling procedures. It is protected from the Freedom of Information Act (FOIA), state and local disclosure laws, use in civil litigation, and as a basis for regulatory action.
Q: Who is authorized to access Protected Critical Infrastructure Information (PCII)?
Access to PCII is limited to PCII Authorized Users. These are federal, state, tribal, or local government employees or designated contractors with specific homeland security duties, who have completed required training and, if non-federal, signed a non-disclosure agreement. Access is granted only based on a demonstrated need-to-know.
Q: How is Protected Critical Infrastructure Information (PCII) utilized in infrastructure security?
PCII is used by government analysts to analyze and secure critical infrastructure, identify vulnerabilities, develop risk assessments, and enhance recovery preparedness measures. It plays a crucial role in protecting essential services and systems from various threats.
Q: What is required for a PCII submission to qualify for protection?
For information to qualify as PCII, it must be voluntarily submitted to the federal government. The submission must include an explicit statement requesting protection under the Critical Infrastructure Information Act of 2002. It must also contain a certification statement. CISA encourages submitters to contact the PCII Program Office for guidance before submission.
Wrap Up
The PCII Program stands as a cornerstone in safeguarding national critical infrastructure by enabling secure, voluntary information sharing between the private sector and government entities. Its robust legal protections and stringent access controls ensure that sensitive data remains confidential, fostering a collaborative environment vital for national security. By understanding the program's mechanisms and adhering to its guidelines, authorized users contribute directly to the resilience and protection of the nation's most vital systems. This commitment to data integrity and secure collaboration is essential for anticipating, preventing, and responding to threats against critical infrastructure.