{"id":20473,"date":"2024-05-16T10:19:31","date_gmt":"2024-05-16T17:19:31","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?p=20473"},"modified":"2024-05-16T10:21:18","modified_gmt":"2024-05-16T17:21:18","slug":"protecting-u-s-critical-national-infrastructure-a-guide-to-shields-up-and-shields-ready","status":"publish","type":"post","link":"https:\/\/webdev.securin.xyz\/articles\/protecting-us-critical-national-infrastructure-a-guide-to-shields-up-and-shields-ready","title":{"rendered":"Protecting U.S. Critical National Infrastructure: A Guide to Shields Up and Shields Ready"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"20473\" class=\"elementor elementor-20473\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5654c18 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5654c18\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dacf809\" data-id=\"dacf809\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d60acaf elementor-widget elementor-widget-text-editor\" data-id=\"d60acaf\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">When cyberattacks on US entities began to escalate at an unprecedented rate in 2023, the US Cybersecurity and Infrastructure Security Agency (CISA) took proactive measures to safeguard US information assets. Two highly successful security campaigns, <\/span><a href=\"https:\/\/www.cisa.gov\/shields-up\" target=\"_blank\" rel=\"noopener\"><b>Shields Up<\/b><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/www.cisa.gov\/shields-ready\" target=\"_blank\" rel=\"noopener\" data-wplink-edit=\"true\"><b>Shields Ready<\/b><\/a><b>,<\/b><span style=\"font-weight: 400;\"> were consecutively established in the aftermath of the Russian invasion of Ukraine to help U.S. organizations defend against and respond to cyber threats.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-88bd485 elementor-widget elementor-widget-image\" data-id=\"88bd485\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"942\" height=\"914\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/top_ransomware_attacks_of_2023_on_cni_sectors.jpg\" class=\"attachment-full size-full wp-image-20874\" alt=\"\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/top_ransomware_attacks_of_2023_on_cni_sectors.jpg 942w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/top_ransomware_attacks_of_2023_on_cni_sectors-300x291.jpg 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/top_ransomware_attacks_of_2023_on_cni_sectors-768x745.jpg 768w\" sizes=\"(max-width: 942px) 100vw, 942px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-b0ffd0c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b0ffd0c\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-d6d3f7d\" data-id=\"d6d3f7d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3f7636c elementor-widget elementor-widget-text-editor\" data-id=\"3f7636c\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The first initiative, Shields Up, remains one of CISA\u2019s most successful defense campaigns, providing free assistance and information on cybersecurity to individuals and organizations to help them enhance their defenses and deal with attacks. The second campaign,<\/span> <span style=\"font-weight: 400;\">Shields Ready, was launched following the success of Shields Up. It took a broader reach and put out stronger protocols geared at moving Critical National Infrastructure (CNI) entities towards protecting themselves against cyberattacks. The campaign also aligns with the <\/span><span style=\"font-weight: 400;\">Federal Emergency Management Agency\u2019s (FEMA) <\/span><a href=\"https:\/\/www.ready.gov\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Ready<\/span><\/a><span style=\"font-weight: 400;\"> campaign, facilitating collaboration and resource-sharing across emergency management communities.<\/span><\/p><p><span style=\"font-weight: 400;\">While each campaign is designed to help US organizations improve their cybersecurity defenses, they cater to different target audiences, offer curated resources and tools, and vetted best practices varying in scale and focus to assist CNI entities. Concerned organizations in the education, healthcare, finance, energy, public service, and other critical sectors should not remain complacent by ignoring these valuable resources, which are provided by CISA at no cost. Instead, they should promptly make use of them, treating them as checklists to ensure they&#8217;ve covered all the required protocols.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc8868f elementor-widget elementor-widget-spacer\" data-id=\"fc8868f\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31f477b elementor-widget elementor-widget-heading\" data-id=\"31f477b\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Does Shields Up Bring to the Table?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-83cc78d elementor-widget elementor-widget-text-editor\" data-id=\"83cc78d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Shields Up encourages proactive participation to increase organizational vigilance in protecting against cyber threats to critical infrastructure. In this campaign, CISA offers\u00a0 several security resources and tools for free, such as cybersecurity evaluations, technical support after a breach, complimentary training, exercises, and a ransomware checklist. With a focus on encouraging cyber breach reporting, CISA has also extended round-the-clock support for users to reach out in case of suspicious cyber activity.<\/span><\/p><p><span style=\"font-weight: 400;\">Some of the best free resources that the Shields Up campaign has made available are:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/services\/cisa-vulnerability-scanning\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Free CISA Vulnerability Scanning<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/ransomware-response-checklist\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Ransomware response checklist<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/programs\/Incident-Response-Training\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Incident Response Training<\/span><\/a><\/li><\/ul><p><span style=\"font-weight: 400;\">Note: While these resources are certainly helpful they cannot be mistaken for thorough vulnerability scanning measures. They are meant to provide basic levels of security for organizations that do not already have it. For instance, CISA\u2019s vulnerability scanning tool specifically looks for 10 common causes of breaches in Microsoft Active Directory passwords; however, there are many more vulnerabilities out there.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dc231e1 elementor-widget elementor-widget-spacer\" data-id=\"dc231e1\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-11db202 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"11db202\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-90b54ae\" data-id=\"90b54ae\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7fe93b7 elementor-widget elementor-widget-heading\" data-id=\"7fe93b7\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Does Shields Ready Help Critical Sector Infrastructure?\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b9e358 elementor-widget elementor-widget-text-editor\" data-id=\"6b9e358\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><b>Shields Ready was designed to protect all critical sector organizations in the United States. <\/b><span style=\"font-weight: 400;\">Established in collaboration with the Department of Homeland Security (DHS), CISA, and FEMA, this campaign aims to equip and motivate CNI entities to prepare for potential retaliatory cyberattacks.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">It emphasizes strategic preparedness with a focus on building resilience into the systems, supply chains, facilities, and processes of CNI organizations.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">According to <\/span><a href=\"https:\/\/www.ibm.com\/downloads\/cas\/E3G5JMBP\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">IBM<\/span><\/a><span style=\"font-weight: 400;\">, the five critical infrastructure sectors most affected by cyber attacks in the last two years (based on the overall data breach costs) are: healthcare, finance, pharmaceuticals, energy, and industrial.<\/span><\/p><p><span style=\"font-weight: 400;\">Other critical sectors such as Transport, Education, Professional Services, and Communication are not far behind and also fall in the top target range of nation-state actors.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-a4f4b0e\" data-id=\"a4f4b0e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8ae5075 elementor-widget elementor-widget-image\" data-id=\"8ae5075\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"524\" height=\"522\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/critical_infrastructure_under_threat.png\" class=\"attachment-full size-full wp-image-20878\" alt=\"\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/critical_infrastructure_under_threat.png 524w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/critical_infrastructure_under_threat-300x300.png 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/critical_infrastructure_under_threat-150x150.png 150w\" sizes=\"(max-width: 524px) 100vw, 524px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-89901e5 elementor-widget elementor-widget-spacer\" data-id=\"89901e5\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61146c0 elementor-widget elementor-widget-image\" data-id=\"61146c0\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"900\" height=\"520\" src=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/data_breach_costs_for_top_5_cnisectors.png\" class=\"attachment-full size-full wp-image-20879\" alt=\"\" srcset=\"https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/data_breach_costs_for_top_5_cnisectors.png 900w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/data_breach_costs_for_top_5_cnisectors-300x173.png 300w, https:\/\/webdev.securin.xyz\/wp-content\/uploads\/2024\/05\/data_breach_costs_for_top_5_cnisectors-768x444.png 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11c436d elementor-widget elementor-widget-text-editor\" data-id=\"11c436d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Securin&#8217;s recent <\/span><a href=\"https:\/\/www.securin.io\/ransomware-report-2023-download\/?_gl=1*2ss9iu*_ga*MTY0NTA0OTQ1MC4xNzEwMjQ4NjEy*_up*MQ..*_ga_31522S3THD*MTcxMDI0ODYxMi4xLjAuMTcxMDI0ODYxMi4wLjAuMA..\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">report <\/span><\/a><span style=\"font-weight: 400;\">conducted a thorough analysis of these attacks, specifically focusing on ransomware incidents. The findings revealed that ransomware groups target entities with vulnerable defenses, high-value data, and substantial user bases. This often includes sectors like healthcare (with confidential patient records), education (containing sensitive information on minors), and finance (such as bank accounts and social security data). Additionally, there is a high likelihood of organizations in these sectors resorting to payouts to mitigate consequences and preserve reputation, especially if they lack the resources to effectively and promptly remediate the breach.<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0332848 elementor-widget elementor-widget-text-editor\" data-id=\"0332848\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">It is this deficit in protection, stemming from lack of knowledge and skilled resources, that CISA aims to address with <\/span><a href=\"https:\/\/www.cisa.gov\/shields-ready\" target=\"_blank\" rel=\"noopener\">Shields Ready<\/a><b>. <\/b><span style=\"font-weight: 400;\">The campaign offers all CNI enterprises access to more than 870 custom sector-specific security guides and best practice instructional manuals that they can use to fortify their defenses. These guides offer easy-to-understand and critical-to-implement measures that will help organizations withstand an array of risks from cyberattacks to national disasters. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e86a2b1 elementor-widget elementor-widget-spacer\" data-id=\"e86a2b1\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-84774a5 elementor-widget elementor-widget-heading\" data-id=\"84774a5\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">For Banks and Financial Organizations<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f3ecf60 elementor-widget elementor-widget-text-editor\" data-id=\"f3ecf60\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The <\/span><a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/nipp-ssp-financial-services-2015-508.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Financial Services-Sector Specific Plan<\/span><\/a><span style=\"font-weight: 400;\">, which advises <\/span><span style=\"font-weight: 400;\">creating a program for public-private cybersecurity exercises to boost incident response, expanding information sharing through the Financial Services Information Sharing and Analysis Center (FSISAC) and the establishment of Treasury\u2019s Financial Sector Cyber Intelligence Group (CIG), setting up joint working groups, and formalizing technical assistance coordination.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/phishing-guidance-stopping-attack-cycle-phase-one\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Stop Phishing at Phase One<\/span><\/a><span style=\"font-weight: 400;\"> is a resource that describes phishing attack techniques and tools targeting MFA-lacking accounts. It offers guidance for SMBs, software manufacturers, and large organizations on prevention, incident handling, and reporting. It also includes fact sheets on implementing phishing- resistant MFA and recommends free security tools like OpenDNS Home to prevent redirection to malicious websites.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CISA&#8217;s <\/span><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/mobile-cybersecurity-shared-services-fact-sheet\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Mobile Cybersecurity Services Factsheet<\/span><\/a><span style=\"font-weight: 400;\"> details the mobile cybersecurity services that can help enhance federal civilian mobile security. These services include a new Mobile Application Vetting (MAV) service to assess app security, Mobile Device Security (T-VIP) to detect device modifications, and Mobile Network Security to deploy protective DNS services.\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26ed2c2 elementor-widget elementor-widget-spacer\" data-id=\"26ed2c2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10913e7 elementor-widget elementor-widget-heading\" data-id=\"10913e7\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">For Educational Institutions<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e9d5f15 elementor-widget elementor-widget-text-editor\" data-id=\"e9d5f15\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">T<\/span><span style=\"font-weight: 400;\">here are custom guides, including several for the K-12 sector such as:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/cyber-threats-k-12-remote-learning-education\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Cyber Threats to K-12 Remote Learning Education<\/span><\/a><span style=\"font-weight: 400;\"> discusses how to address cyber threats like doxing, phishing, domain spoofing, and software vulnerabilities. CISA also offers a video conferencing tool for school IT security, along with safety guidelines for application updates, password protection, participant vetting, and screen-sharing control.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/k-12-school-security-guide-3rd-edition\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">K-12 School Security Guide (3rd Edition) and School Security Assessment Tool<\/span><\/a><span style=\"font-weight: 400;\"> helps schools improve safety measures by assessing physical security components. It focuses on protection and mitigation strategies, covering equipment, personnel, policies, and training. Users receive tailored recommendations after completing the assessment.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/cybersecurity-guidance-k-12-technology-acquisitions\" target=\"_blank\" rel=\"noopener\"><span>Cybersecurity Guidance for K-12 Technology Acquisitions<\/span><\/a><span> guides K-12 organizations on dealing with third-party vendors encouraging them to request for automatic security updates, robust logging, and multifactor authentication. They must also ensure vendors follow Secure by Design principles,\u00a0 demand pre-deployment vulnerability testing, and establish a vulnerability disclosure program.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30557f4 elementor-widget elementor-widget-text-editor\" data-id=\"30557f4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">In addition to the above, CISA also oversees <\/span><a href=\"http:\/\/schoolsafety.gov\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">SchoolSafety.gov<\/span><\/a><span style=\"font-weight: 400;\">, a comprehensive federal website offering a centralized hub for school safety resources, information, and basic tools.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Using these resources, the education sector has <\/span><span style=\"font-weight: 400;\">successfully and proactively adopted CISA\u2019s cybersecurity resources in almost all US states. For instance, more than 10 schools in Maine joined together to form the Shields Up Maine cohort, while several other prominent organizations like Miami University, the University of Utah, and El Monte Union High School District have implemented cybersecurity measures recommended by CISA, enhancing their resilience against cyber threats and ensuring the protection of sensitive data. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d70cc70 elementor-widget elementor-widget-spacer\" data-id=\"d70cc70\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1dab89d elementor-widget elementor-widget-heading\" data-id=\"1dab89d\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">For Healthcare Providers<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e4364a elementor-widget elementor-widget-text-editor\" data-id=\"5e4364a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">In healthcare, renowned organizations like the American Hospital Association and the American Optometric Association have embraced Shields Up. <\/span><span style=\"font-weight: 400;\">Other healthcare organizations can also benefit from this goldmine of resources, including:<\/span><\/p><ul><li><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/cyber-threats-medical-technology-and-communication-technology-protocols\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Cyber Threats to Medical Technology and Communication Technology Protocols<\/span><\/a><span style=\"font-weight: 400;\"> outlines effective measures to safeguard patient data while using medical devices connected to the internet.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/nipp-ssp-healthcare-public-health-2015-508.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Healthcare and Public Health Sector-Specific Plan<\/span><\/a><span style=\"font-weight: 400;\"> outlines strategies for critical infrastructure resilience, emphasizing collaborative risk management and partnerships. It addresses threats like pandemics, cyber attacks, and supply chain disruptions, prioritizing flexibility and adaptation.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/cisa-resources-applicable-threats-against-healthcare-and-public-health-sector\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CISA Resources Applicable to the Healthcare Sector<\/span><\/a><span style=\"font-weight: 400;\"> outlines strategies for critical infrastructure resilience, emphasizing collaborative risk management and partnerships. It addresses threats like pandemics, cyber attacks, and supply chain disruptions, prioritizing flexibility and adaptation.<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">Another good resource is <\/span><a href=\"https:\/\/www.cisa.gov\/resources-tools\/services\/cyber-storm\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Cyber Storm<\/span><\/a><span style=\"font-weight: 400;\">, a sort of cyberattack drill organized by CISA to enhance policy, coordination, and decision-making in cyber incident response. <\/span><span style=\"font-weight: 400;\">It helps different groups, including governments and private companies, work together to tackle cyber threats effectively.<\/span><\/p><p><em><span style=\"font-weight: 400;\"><strong>Note:<\/strong> This is in no way equivalent to a full-scale penetration test, but instead, is an exercise on incident response training and reporting.<\/span><\/em><\/p><p><span style=\"font-weight: 400;\">These two campaigns, <\/span>Shields Up and Shields Ready<span style=\"font-weight: 400;\">, have made a concerted effort to emphasize the importance of equipping US critical infrastructure entities with the necessary tools and resources to navigate and recover from disruptions effectively. In response, many U.S organizations have begun to prioritize cybersecurity, adopting basic cybersecurity practices and vulnerability scanning from CISA to improve their attack surface protection. <\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-b5dfb48 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b5dfb48\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-7db3f2c\" data-id=\"7db3f2c\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-62a5699 elementor-widget elementor-widget-text-editor\" data-id=\"62a5699\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h3 dir=\"ltr\" style=\"text-align: center;\">&#8220;If you&#8217;re not talking about cybersecurity in the boardroom today, you&#8217;ll be doing it during or after an attack.&#8221;<\/h3><h4 dir=\"ltr\" style=\"text-align: center;\"><strong>&#8211; Brandon Wales, CISA\u2019s Executive Director<\/strong><\/h4>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-98534e2 elementor-widget elementor-widget-spacer\" data-id=\"98534e2\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c38a41a elementor-widget elementor-widget-heading\" data-id=\"c38a41a\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Do We Recommend?\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc52f39 elementor-widget elementor-widget-text-editor\" data-id=\"fc52f39\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Securin encourages users to capitalize on CISA\u2019s sector-specific resources. Shields Up and Shields Ready offer a plethora of options for CNI organizations to bolster security and resilience, especially for those unable to afford managed security services and CTEM solutions amidst rising cyber threats. W<\/span><span style=\"font-weight: 400;\">e also recommend following these <\/span><span style=\"font-weight: 400;\">best practices to enhance CNI security and resilience:<\/span><\/p><ul><li><span style=\"font-weight: 400;\">Strengthen security with multi-factor authentication<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prioritize software updates for known vulnerabilities<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Verify data recovery capabilities and secure backups<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Evaluate manual controls for essential systems<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Improve network security by deactivating non-essential ports and protocols<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Utilize CISA&#8217;s free cybersecurity services, including vulnerability scanning<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Establish a crisis-response team with clearly defined roles and responsibilities<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5893990 elementor-widget elementor-widget-spacer\" data-id=\"5893990\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-24e3ead elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"24e3ead\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-3d3f4f8\" data-id=\"3d3f4f8\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-426e8ea elementor-widget elementor-widget-spacer\" data-id=\"426e8ea\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-84bafa4 elementor-widget elementor-widget-text-editor\" data-id=\"84bafa4\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h3 dir=\"ltr\" style=\"text-align: center;\"><a href=\"https:\/\/securin.io\/contact-us\">Talk with our experts<\/a> to help fortify your defenses and strengthen your cybersecurity posture.<\/h3>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2677758 elementor-widget elementor-widget-spacer\" data-id=\"2677758\" data-element_type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>As cyberattacks on critical infrastructure were surging, CISA stepped up to protect US information assets with two security campaigns: Shields Up and Shields Ready.<\/p>\n","protected":false},"author":1,"featured_media":20885,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[631,81,135],"tags":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/20473"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/comments?post=20473"}],"version-history":[{"count":23,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/20473\/revisions"}],"predecessor-version":[{"id":20888,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/posts\/20473\/revisions\/20888"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/20885"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=20473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/categories?post=20473"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/tags?post=20473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}