White House to raise cyber standards for healthcare, water and … – Cybersecurity Dive

The Cybersecurity and Infrastructure Security Agency will also roll out minimum security standards by late October that can apply to organizations across sectors.
Water, emergency communications and healthcare are soft spots in U.S. critical infrastructure resiliency, areas that if compromised could directly affect people’s safety. 
The attention on healthcare comes after a tumultuous period for the sector. One of the nation’s largest health systems, CommonSpirit Health, is still reeling from a ransomware attack that is disrupting services. 
The U.S. counts 16 sectors as critical infrastructure, but some already have a high standard of security in place. Financial services, for example, has existing policies dictating security compliance.
The White House’s goal is for Americans to have confidence in all critical services and is honing in on those sectors that don’t already have standards in place, according to Neuberger. 
The White House is now aiming to fill the gaps, much as it did with its focus on oil and gas after the Colonial Pipeline ransomware attack last year. The Transportation Security Administration rolled out security guidelines for oil and gas, and will introduce additional guidelines for aviation and rail, Neuberger said. 
Rolling out security guidelines is not without its hiccups. After key stakeholders pushed back, The White House brought in executives across the sector to share top secret, classified context around threats targeting the sector, Neuberger said. 
The TSA revised the security directives with the executive input and used a similar model of public-private sector collaboration to develop aviation and rail guidance.
Get the free daily newsletter read by industry experts
Rising ransomware attacks and higher payout demands have battered the insurance industry, leaving many organizations exposed and vulnerable. 
The password manager warned customers to lookout for brute force attacks, phishing or credential stuffing.
Subscribe to Cybersecurity Dive for top news, trends & analysis
Get the free daily newsletter read by industry experts
Rising ransomware attacks and higher payout demands have battered the insurance industry, leaving many organizations exposed and vulnerable. 
The password manager warned customers to lookout for brute force attacks, phishing or credential stuffing.
The free newsletter covering the top industry headlines

source

Leave a Comment