Sandy Kline

Director Facility Related Control Systems

Office of the Secretary of Defense(EI&E)/Construction

Sandy Kline is serving at the Department of Defense (DoD) for the Under Secretary for Acquisition and Sustainment as the Director for Mission Assurance and Facility Related Control Systems Cybersecurity. She is leading efforts to understand, quantify and mitigate the cybersecurity risks to hundreds of thousands of Facility Related Control Systems (FRCS) on military installations worldwide. FRCS represent a significant portion of the Department’s critical infrastructure providing the water and power required for accomplishment of military missions. Using the DoD’s Mission Assurance methodology as foundation, Ms Kline is working across the Department to enable the identification of the impacts of cybersecurity attacks to the operational technology (OT) and information technology (IT) to mission capabilities and to the life, health, and safety of installation personnel. Key to this effort is mapping interdependencies between and across systems by building on mission decomposition work the Services have done through Crown Jewel, NDAA 1650, and Mission Relevant Terrain-Cybersecurity analyses. Leveraging the NIST Cybersecurity Framework 2.0 (release in February 2024), her team has created a FRCS Cybersecurity Framework to enable standardized assessment and tracking of organizational cybersecurity maturity that is key the development and sustainment of complex continuous monitoring and recovery capabilities being pursued by DoD to meet Executive Order 14028 Improving the Nation’s Cybersecurity.