National Risk Management Center (NRMC)

Abstract city image.As the Agency’s center for collaborative risk management, the NRMC works closely with the critical infrastructure community to identify and analyze the most significant risks to our Nation, and strategically manage resiliency and security efforts to “Secure Tomorrow”.

Staying ahead of evolving cyber and physical threats depends on a unified effort. The NRMC is committed to working with the private sector, facility operators/owners, all levels of government, and the public to protect our way of life.

Follow @CISAgov on Twitter for the latest news on managing risk to the Nation’s critical infrastructure.

NRMC Overview

The National Risk Management Center (NRMC) is leading the Nation’s effort for secure and resilient critical infrastructure both now and into the future. There are 16 critical infrastructure sectors that are important to the functioning of our country and everyday lives, including communications, energy, transportation, and water. With most of the critical infrastructure owned by the private sector, managing risk is a priority shared by industry and government.

Through collaborative efforts with the private sector, government agencies, and other key stakeholders, the NRMC uses a dynamic, cross-sector risk management process to identify, analyze, prioritize, and manage the most significant risks—cyber and physical—to these important national functions.

Central to the NRMC’s work is understanding criticality—what functions are so vital that if disrupted or sabotaged may cause cross-sector impacts or nationwide degradation? Understanding criticality enables the NRMC to strategically focus on those functions at the highest risk.

NRMC's Top Initiatives

Guiding the NRMC’s risk management efforts are the National Critical Functions (NCF)—the functions of government and the private sector that are so vital to the United States that their disruption, corruption, or dysfunction would have a debilitating effect on security, national economic security, national public health or safety.

Developed through a far-reaching partnership effort with the critical infrastructure community, the NRMC incorporated sector expertise and risk analysis to understand the NCF at the highest risk of an attack or threat. The NRMC implemented initiatives to effectively manage risk to the NCF.

Click an initiative below or visit the NRMC Initiatives page to learn more.

   Fifth Generation (5G) 

5G, the next generation of wireless technology, is transforming telecommunication networks and enhancing critical services across the Nation.

   Election Security

Fair and free elections are a hallmark of American democracy—an electoral process that is both secure and resilient is a vital national interest.

   EMP | GMD

An intentional electromagnetic pulse attack (EMP) or geomagnetic disturbance (GMD) can affect large areas. Mitigating EMP/GMD effects secures our Nation and economy.

   ICT Supply Chain Risk Management

U.S. critical infrastructure relies on Information and Communications Technology (ICT) for daily operations. Vulnerabilities exploited in the ICT supply chain can affect all users of that technology.

   National Critical Functions

Functions of government and the private sector that are so vital that their disruption, corruption, or dysfunction would have a debilitating effect on our security, national economy, and public health or safety.

   Pipeline Cybersecurity

2.7 million miles of pipelines transport commodities across the Nation. Enhancing the cybersecurity for the pipeline ecosystem ensures our economic and national well-being.

   Positioning, Navigation, & Timing

Positioning, Navigation, and Timing (PNT) is necessary for the functioning of the Nation’s critical infrastructure such as power grids and communication networks.



For questions or comments, email

Was this webpage helpful?  Yes  |  Somewhat  |  No