The German Response to Protecting Critical Infrastructure from Hackers

Who is offering the suggested solution to combat hackers? The head of Germany’s domestic intelligence service

What is the proposed solution to combat hackers of Germany’s critical infrastructure? to plant malware that gets triggered when the critical infrastructure is hacked.

What does that mean in non-tech term? Fight back by hacking back. 

dw.com | German intelligence head warns of cyber attacks on critical infrastructure

 

What's been the legislative & regulatory responses to Atlanta's ransomware attack?

Atlanta’s city services recently experienced a ransomware attack, the responses include:

  • Calls for more transparency for utilities about their cybersecurity to “keep consumers aware of the threats and their frequency”
  • Because electricity is a security issue, the market cannot resolve the issue & the government must act
  • FERC is beefing up mandatory reporting requirements

Eagle Tribune Opinion | Utilities should be more transparent about cybersecurity

3 Ways The Los Angeles Cyber Center is a Model for Cities

What standards did Los Angeles use in crafting its Cyber Center? Federal Government and industry Standards

The key to the city Cyber Center?  integrated strategic operations center

What does the integrated strategic operations center do? 

  •  “processes cyber threat information from the Homeland Security Department, the FBI and various private sector and non-profit sources and feeds it out to its member operations centers and to city departments”

How does this help unify cyber protections…

Lege Trend. Data Security Legislation for Infrastructure. Read the Bill.

A House Companion to the Senate’s, Securing Energy Infrastructure Act of 2017 by Senator Angus King (I-ME) and Senator James E. Risch (R-ID), has been filed by Congressman C.A. Dutch Ruppersberger (MD-02) and Congressman John R. Carter (TX-31). The legislation will:

  • “establishes a two-year pilot program to study covered entities and identify new classes of security vulnerabilities and research and test technology – like analog devices – that could be used to isolate the most critical systems…

2 Ways Hurricane Harvey Exposes Need to Cyber Security legislation

Hurricane Harvey exposed the need for energy security legislation by:

  • highlighting that we must ensure our energy resources are safe, secure and plentiful
  • allowing states to leverage federal resources, knowledge, and expertise to build stronger partnerships with public and private stakeholders to guarantee a better energy future

The Hill | Opinion by Rep. Fred Upton (R-MI) | In Harvey’s wake, energy security legislation needed now more than ever

Grid Hacking. New Study Reveals Dragonfly 2.0. 3 Bits informed:intel on Who, How and Why

A review of grid security by Symatec reveals that since 2015 hackers have been trying to gain access to the energy sector. Here’s what you need to know:

  • It’s not only US based energy sector that is being targeting. The energy sectors in the U.S., Switzerland and Trukey.
  • New technology targets. the hackers are looking for expanded access to operational systems & are taking screenshots of all systems in use to outline their function
  • Hackers gained access through malware and phishing employees…

Drones Changed Disaster Recovery.

Hurricane Harvey marks the 1st wide scale commerical use of drones after a disaster.

In addition to news crews utilizing drone footage, drones have been deployed by :

  • Insurance Companies to document and determine damages
  • Telecommunications companies to assess damages to infrastucture

San Antonio Express News | Government Technology | How Fleets of Drones Are Helping Assess Damage from Hurricane Harvey

Cybersecurity Policy Not only an IT Issue. Impacts 6 HUGE Policy & Business Issues:

The 2016-2017 Chair of the National Governor Association, Virginia Governor Terry McAuliffe, explains that cyber security directly impacts these policy areas and businesses:

  • technology
  • health care
  • education
  • public safety issue
  • business and economics, including insurance
  • democracy (elections)

State Scoop | 38 governors sign cybersecurity compact

How to Move Grid Cybersecurity requirements by linking it to 2 other energy bills.

How to pass electric grid cybersecurity standards in 2 steps of legislstive logic:

  • Tie expedited permitting of pipelines to electric grid modernization
  • Tie electric grid modernization to grid cybersecurity

Natural Gas Intel | Senate Energy Policy Reform Bill Revived, Fast-Tracked

Cyber Security Factoring into Debt Rating for Cities, Counties & States.

Cyber security is becoming an element in analysis for bond markets.

Is this shift a result of a catalyst? Yes, the use of malware toward local governmental entities

Does this follow inthe footsteps of other entities disclosing cyber protections to investors? Yes, utilities and hospitals are starting to disclose any information to potential investors in bond documents about cyber risks or defenses

Reuters | U.S. muni market slowly starts paying heed to cyber risks