CISA's 'Shields Up' Campaign Proving Value, Built for the Long Haul - MeriTalk

CISA's 'Shields Up' Campaign Proving Value, Built for the Long Haul - MeriTalk

The Cybersecurity and Infrastructure Security Agency’s (CISA) “Shields Up” cybersecurity campaign launched in February to warn critical infrastructure operators and other U.S.-based organizations of cybersecurity threats spilling over from Russia’s invasion of Ukraine is proving its worth over the first four months of operation.


However long the current Shields Up campaign lasts, CISA and its government partners including the FBI face a very long haul in trying to hold the line against destructive exploits against critical infrastructure amid an ever-evolving active attack environment.


Because the practical goals of the Shields Up program are focused on promoting better security across a very wide range of industry sectors – including those that are cyber-savvy and some that are not – the tenets of the Shields Up program are likely to continue long into the future.


Shields Up Genesis


The Shields Up campaign – as far as we can tell from public information – has not rolled out any particularly novel technologies or tactics for cyber defense. Rather, the campaign has provided pointed focus and visibility into cyber threats emerging from the Russian invasion, and turned the attention of critical infrastructure operators back to a long list of well-known advice on doing many of the basic steps that make networks and infrastructure more secure.


Those steps include many that CISA returns to again and again in its guidance to government and the provide sector:


  • Implement multi-factor authentication (MFA) for remote, privileged, and administrative access;

  • Patch known vulnerabilities promptly and according to CISA’s alerts and guides;

  • Disable unused ports and protocols;

  • Implement strong cloud service controls;

  • Focus on unexpected or unusual network behavior;

  • Pay specia ..

    Support the originator by clicking the read the rest link below.