The Cybersecurity and Infrastructure Security Agency (CISA) has released safety and security guidelines for critical infrastructure, fulfilling obligations under the Biden administration’s executive order on artificial intelligence. The guidelines address the opportunities and risks associated with AI in critical infrastructure, instructing operators and owners to govern, measure, and manage their use of the technology. They also emphasize the need to understand AI vendor dependencies, inventory AI use cases, and create procedures for reporting AI security risks. The guidelines aim to mitigate AI-related dangers to critical infrastructure and promote AI’s transformative solutions while addressing vulnerabilities and potential attacks.
CISA has reported that its Ransomware Vulnerability Warning Pilot program, which proactively notifies organizations about potential ransomware vulnerabilities, has resulted in over 800 vulnerabilities being resolved. The program, mandated under cyber incident reporting legislation, has made 1,754 notifications to organizations, with 852 taking action to patch, implement compensating controls, or take devices offline. The program has been particularly effective in reducing risk and exposure for government facilities, healthcare organizations, and entities in the energy, financial services, and transportation sectors.
CISA plans to launch an automated vulnerability warning program by the end of 2024. The program aims to alert organizations running software with vulnerabilities exploited by ransomware gangs and urge them to patch the vulnerabilities before being infiltrated. The pilot phase has already issued 2,049 warnings and expanded to include known exploited vulnerabilities and common misconfigurations linked to ransomware attacks.
CISA is an increasingly important organization for MSPs, particularly with the resources available. The focus on governance, risk management, and automated systems establishes a framework that not only anticipates future cybersecurity landscapes but also provides a blueprint for other nations and sectors to follow.
Moving forward, the effectiveness of these measures will largely depend on continuous improvement and adaptation to evolving cyber threats and technological advancements – and adoption. Which is why we care.