Coordinating cybersecurity efforts between 911 and FirstNet promises to be critical for public safety

There simply are not enough cybersecurity experts to staff all of the 6,000-plus PSAPs, much less the money to pay them in a highly competitive market. However, regional cybersecurity centers could be established to provide the needed cyber support for PSAPs covering extended geographic areas, while hopefully ensuring greater consistency in implementing cybersecurity policies.

Who should create those cybersecurity policies for PSAPs? That’s a big question now, one that officials at all levels of government may be debating for some time.

What is clear is that cybersecurity policies for PSAPs need to be coordinated with the cybersecurity policies used by FirstNet and other critical-infrastructure information-technology (IT) systems. After all, the effectiveness of next-generation systems are based on the ability share information in real time, which means data must be transported between networks—particularly NG911 PSAPs and responders using FirstNet—without delays associated with incompatible cybersecurity procedures.

This is public safety, so quick action is needed when responding to an emergency, or lives could be lost. But opening picture or video that releases malware into a sensitive public-safety database that could be compromised also may endanger lives or property, albeit on a different timetable.

As a result, it is critical that both FirstNet and 911 systems have levels of security. In addition, the link between these systems introduces no new vulnerabilities and causes the least amount of delay possible when information is transported between the systems—something that will happen constantly, in both directions.

It is encouraging that officials representing FirstNet and the 911 community seem to recognize the importance of this cybersecurity coordination, saying all the right things conceptually.

This is a good start, and there are other good signs on this front. FirstNet plans to announce its contractor in November, and the organization will understand its cybersecurity strategy at that time. In addition to a cybersecurity staff, FirstNet has a 911 liaison charged with helping coordinate with PSAPs.

But the concern is what the next steps should be after FirstNet announces its contractor award, because it is not clear with whom FirstNet officials should talk. Who represents the 911 community to help identify what the cybersecurity coordination between the two systems should look like? If a cybersecurity agreement is reach, do these people have the power to see that the cybersecurity strategy is implemented, or will the deal effectively have to be brokered repeatedly at the state and local entities that oversee the 6,000 PSAPs?