What does OMB Memorandum 10-28 cover?

• A. Clarifying Cybersecurity Responsibilities and Activities of the Executive Office of the President and the Department of Homeland Security
• B. Establishing new PII handling guidelines
• C. Implementing a TIC framework
• D. Defining incident response playbooks

Answer: (A)

The main idea this memorandum covers is clarifying who does what in federal cybersecurity leadership. It sets out the division of responsibilities between the Executive Office of the President (the EOP) and the Department of Homeland Security (DHS). The EOP, with offices like the White House policy staff, provides high-level direction and policy, while DHS focuses on implementation, coordination, and operational activities across agencies. This separation helps ensure accountability, reduces duplication, and promotes a unified, government-wide approach to protecting federal civilian networks.

Other topics—such as new guidelines for handling PII, implementing a TIC (Trusted Internet Connection) framework, or defining incident response playbooks—are governed by different policies or programs and aren’t the focus of this memorandum.