Cybersecurity and Infrastructure Security Agency
Cyber attacks can have a significant impact on the infrastructure that keeps us safe and connected. These include electricity grids, roads and public transportation, telecommunications, and more. As a cybersecurity and infrastructure security agency, CISA leads the national effort to strengthen the nation’s critical infrastructure. It also works to train and recruit a world-class cybersecurity workforce.
Electric Grids
The electric grid is a critical component of many everyday activities. It provides electricity to consumers, businesses, and government agencies in the United States.
Cyberattacks can harm power grids in a number of ways, from deliberate attacks to unintentional compromises. They can also cause power outages that are severe enough to damage citizens, businesses, and infrastructure.
To combat these threats, the Department of Energy (DOE) has focused on improving cybersecurity preparedness and coordinating incident response and recovery efforts. It has also accelerated research and development to make energy delivery systems more resilient.
The United States electricity grid is a critical infrastructure, but it remains vulnerable to cyberattacks. Its operational technology, or OT, increasingly connects to networks that allow hackers to gain access to the grid.
Dams and Levees
Dams and levees are critical components of the nation’s infrastructure, providing hydroelectric power, river navigation, water supply, wildlife habitat, waste management, flood control, and recreation. The failure of a dam or levee can cause significant environmental, economic, and public safety damage.
There are many threats to dams, and cyber-attacks are not an exception. They have been used for a variety of reasons, including to stop essential services and harm people.
These attacks can occur in a wide variety of ways, from hacking into industrial control systems to compromising unsecured network infrastructure. However, they can be difficult to predict or prevent.
Routine coordination and emergency exercises with local, state, and federal emergency management partners can help owners and design engineers better understand potential threat vectors to their dams. They can also assist in the development of appropriate security measures that maximize risk mitigation potential.
Internet
The internet is a global computer network that allows various devices to communicate with each other. It is an essential part of the modern world and is used to exchange information, conduct business, and make purchases.
CISA is a division of the Department of Homeland Security that is responsible for defending the internet and improving its resilience and security. It does this by assisting the government and private sectors to provide cybersecurity tools, threat analysis, and incident response.
Cybersecurity threats are continually changing, and new technologies and techniques are being introduced to combat them. This means that it is vital for the agency to constantly update its policies and procedures.
As a result, CISA has rolled out multiple programs that help identify threats and provide solutions. These include Automated Indicator Sharing (AIS), which allows industry and government partners to share critical data in near real-time after an intrusion has been observed.
Emergency Services
The emergency services sector is a large community of millions of people and organizations that provide prevention, preparedness, response, and recovery services. It also includes private sector resources, such as industrial fire departments and security organizations.
Cybersecurity is one of the most significant threats that the ESS faces. As advanced communication technologies become more prevalent, they also increase the opportunities for vulnerabilities to emerge.
CISA offers several initiatives to help the ESS manage risk and coordinate information. These include the Emergency Services Sector Cybersecurity Initiative, which outlines a number of resources that can be used to improve cybersecurity in the ESS.
Wisconsin’s statewide cyber resource, the Cyber Response Team (CRT), has seen an uptick in volunteer members since 2015. The team is now managed by WEM, which assigns CRT members based on their expertise. WEM staff also provides cyber advisors for the team.