Puerto Rico CISA Assessments

To Whom It May Concern:

Pursuant to the Freedom of Information Act, I hereby request the following records:

Reports show that Puerto Rico has been the subject of several "hacks" over the last three years:
https://www.notiuno.com/noticias/puerto-rico-sufre-m-s-de-450-millones-de-ataques-cibern-ticos-a-hospitales-y/article_c58ff970-425e-11ee-b181-e378c3b1bbfc.html
https://www.nbcnews.com/news/latino/cyberattack-cripples-puerto-rico-toll-collection-system-rcna24993

Therefore, I request the following records:

1) All records produced through risk and vulnerability assessments (RVA), critical infrastructure assessments, or any other type of assessments done on the security of Puerto Rican government agencies' digital systems.

2) Any presentations, presentation attachments, and instructional materials (these include but are not limited to audio, video, PowerPoint presentations, and slide formats) concerning the results of these assessments meant to explain these findings to Puerto Rican government officials.

3) Any communications, messages, emails, and attachments between your department and Puerto Rican government agencies (including but not limited to: Puerto Rico Police Department, Office of the Governor (La Fortaleza), and the Municipality of San Juan) concerning the results of these assessments.

This request is for all records produced between January 1, 2022 and the time this request is processed.

This request is not being made for commercial purposes. I am an independent journalist and the documents obtained through this request will be used in the course of reporting about cyber security vulnerabilities within Puerto Rico.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 20 business days, as the statute requires.

Sincerely,

Carlos Berríos Polanco