The US Agriculture industry is only the latest victim of ransomware attacks – highlighting yet again the susceptibility of our supply chain to devastating cyber attacks. Considering recent cyber attacks on the water supply, we need to rethink our conception of which industries and types of companies are at risk.
Every U.S. industry relies on the nation’s infrastructure to function, whether it’s through direct operational dependencies or third-party supply chains. According to the Cybersecurity & Infrastructure Agency (CISA), “there are 16 critical infrastructure sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States, that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health or safety, or any combination thereof.” The 16 critical infrastructure sectors are diverse, ranging from Manufacturing and Agriculture to Financial and Public Health—affecting all aspects of modern life. But, of note, the Energy sector is special.
The Capital One data breach has put cyber risk management in the spotlight. From a scenario-building perspective, it’s the kind of story that gives the Axio team global attention and serves as a flagship use-case for the Axio360 platform. We’ve even written a book outlining how to drive continuous cybersecurity improvement if you want to jump right into the solution.
Axio is proud to announce it has been recognized as a Sample Vendor in Gartner Hype Cycle for Cyber and IT Risk Management 2021. The research firm identified Axio as a Sample Vendor in the Cyber Risk Quantification category.
With the ever-increasing number of cyberattacks on U.S. based organizations, the White House is actively moving to build preventative infrastructure. Previously, the Biden Administration has released a cyber memo, as well as a significant allotment in their infrastructure plan. In response to this, the Axio team is working to enable better cyber risk management for the electric industry. On July 7-8, several representatives from governmental bodies, service providers, and cybersecurity agencies convened in a two-day cybersecurity insurance forum put together by the Axio senior management team. Opening remarks from the Department of Energy and three keynotes framed the event and the problem space.
Both corporations and governments are putting more emphasis on the importance of a ransomware action plan, citing the ever-increasing frequency in attacks as the driving force.
The Biden administration’s 100-day plan to address cybersecurity risks to...
The ever-increasing onslaught of ransomware attacks has created an air of urgency to reinforce internal networks and make cybersecurity programs in the organization more resilient to this risk. Designing a system for sustaining overall operations even if parts of the system are compromised is vital. Implementing ransomware resilience requires a systemic approach. For example, companies should be analyzing a ransomware scenario proactively to identify and address interdependencies.
The Cybersecurity Capability Maturity Model (C2M2) Version 2.0 (V2.0) was released today, the 21st of July 2021. The update addresses emerging technologies and the evolving cyber threat landscape. The update was guided by the Energy Sector C2M2 Working Group, which comprises 145 energy sector cybersecurity practitioners representing 77 organizations. The group was formed as a collaborative effort through the Electricity Subsector Coordinating Council and the Oil and Natural Gas Subsector Coordinating Council.