Cybersecurity Unit

In December 2014, the Criminal Division created the Cybersecurity Unit within the Computer Crime and Intellectual Property Section to serve as a central hub for expert advice and legal guidance regarding how the criminal electronic surveillance and computer fraud and abuse statutes impact cybersecurity. Among the unit's goals is to ensure that law enforcement authorities are used effectively to bring perpetrators to justice while also protecting the privacy of every day Americans. In pursuing that goal, the unit is helping to shape cyber security legislation to protect our nation's computer networks and individual victims from cyber attacks. The unit also engages in extensive outreach to the private sector to promote lawful cybersecurity practices. 

White Papers and Other Documents

• Cyber Incident Preparation, Response, and Reporting
  • Best Practices for Victim Response and Reporting of Cyber Incidents, Version 2.0 (Revised September 2018)
  • Digital Ad Industry Best Practices for Partnering with Law Enforcement (June  2021)
• Gathering Intelligence and Purchasing Data on the Dark Web
  • Legal Considerations when Gathering Online Cyber Threat Intelligence and Purchasing Data from Illicit Sources (February 2020)
• Vulnerability Disclosure Programs and Policies
  • A Framework for a Vulnerability Disclosure Program for Online Systems (July 2017)
• Internet of Things
  • Cybersecurity Unit and Consumer Technology Association Joint Statement on Securing IoT Devices (July 2017)
• Information Sharing
  • DHS and DOJ Cybersecurity Information Sharing Act Procedures and Guidance and Annex of Frequently Asked Questions Regarding the Cybersecurity Information Sharing Act of 2015 (October 2020)
  • Sharing Cyber Threat Information Under 18 USC § 2702(a)(3) (May 2014)
  • Department of Justice and Federal Trade Commission: Antitrust Policy Statement on Sharing of Cybersecurity Information (April 2014)
• Active Defense
  • Cyber Defense Experts Roundtable Report (March 2015)
• Cyber Threats
  • Ransomware: What It Is and What To Do About It (June 2016)
  • How To Protect Your Networks from Ransomware: Interagency Technical Guidance Document (June 2016)
• DMCA and Security Research
  • CCIPS Comments on the 2024 DMCA Section 1201 Exemption for Research Pertaining to Generative AI
  • CCIPS Comments on the 2021 DMCA Section 1201 Security Research Exemption (February 2021)
  • CCIPS Comments on the 2018 DMCA Section 1201 Security Research Exemption (June 2018)
     

Select Speeches & Press

• Justice Department Hosts Second Cybersecurity Industry Roundtable (September 28, 2018)
• Active Defense: Remarks of Assistant Attorney General Leslie R. Caldwell at the Georgetown Cybersecurity Law Institute (May 20, 2015)
• First Cybersecurity Industry Roundtable: Remarks of Assistant Attorney General Leslie R. Caldwell at Criminal Division's Cybersecurity Industry Roundtable (April 29, 2015)
• Creation of the Cybersecurity Unit: Remarks of Assistant Attorney General Leslie R. Caldwell Speaks at Georgetown Cybercrime 2020 Symposium (December 4, 2014)