Taking Risk Out of the System

Taking Risk Out of the System

How do you take the risk out of government networks while also empowering local decision-making and ensuring information flows between widely dispersed stakeholders?


That’s an issue faced by governments around the world and the U.S. is starting to take positive action to address this with its proposed Cybersecurity State Coordinator Act of 2020.


The legislation is currently being considered in Congress that would require local governments to appoint a cybersecurity leader for each state. The aim is to improve coordination and intelligence sharing between state and federal governments for both preventative measures and to speed up incident response times in the event of a cyberattack.


This a positive move from the U.S. government and the importance of coordination is all too apparent for two principal reasons. 


First, the networks that need defending get ever more complex. The picture is complicated enough looking only at federal, state and local governmental bodies. This complexity grows as we look across critical national infrastructure and wider industry, and grows exponentially when we consider the ecosystem of vendors and suppliers with systems that are interconnected and data that is shared. Threat actors are looking across this attack surface continually for routes into prized high-value targets.


Second, faster response times are a necessity to keep pace with the speed of the adversary. Cyberattacks against local governments seem to be on the rise. In December alone, for example, four U.S. cities were hit with ransomware, including two cities in Florida and one in both Louisiana and California. When you consider that the malware will have been present on the network for enough time for the adversary to exfiltrate and encrypt data, the ..

Support the originator by clicking the read the rest link below.