Critical Infrastructure faces both traditional threats as well as industry specific security threats. Cyber-physical systems within Critical Infrastructure are often susceptible to the following issues: physical environment, limited processing and bandwidth and non-TCP/IP open formats, longer tech-refresh cycles, and how it varies from traditional priority of Confidentiality, Integrity and Availability to Availability, integrity and Confidentiality.
Series: Cyber Awareness Videos
Tired of reading the same stale cyber awareness content? Lacking the time and/or resources to develop and deliver effective security content to your workforce? Strengthen your cybersecurity posture by implementing an ongoing awareness campaign that incorporates short, fresh video content created by the CSIAC.
Each month, the CSIAC will introduce a new video adding another cyber awareness topic to the series. This fresh supply of awareness content will provide organizations with the much needed variety of material to maximize effectiveness. The initial video collection covers the fundamental topics of any awareness campaign, such as phishing, malware, rules for handling PII, and social engineering.
Cybersecurity training efforts are most effective when they can successfully incorporate an element of ongoing awareness. The initial release of 12 videos and the steady supply of new content will help any organization create an ongoing cybersecurity campaign, or complement their existing efforts.
CSIAC releases a new Cyber Awareness training video on a monthly basis. Subscribe to receive an email notification when new videos are released.
Emerging Concepts to Critical Infrastructure
Because of the unique communications of cyber-physical systems, new tools have been developed in order to effectively monitor and defend these systems. Two specific efforts and approaches to these design and security challenges are the DoD Industrial Control System Defense Operational Approach, which focuses on detection, mitigation, and recovery and the Cyber Threat Activity Matrix…
Cyber Physical Security
In order to understand a problem, definitions related to the issue are often studied. A common lexicon in this arena will help improve communication between industries. A few relevant definitions are explained.
Privacy of User Data – Today’s Predictions for Tomorrow’s Internet
In the future, we will continue to see arguments over the degree of privacy users can expect from internet service providers and other businesses. Users must be aware of the data that they share online by reading privacy statements that are posted on company websites and forms. It is imperative that users understand how their…
Internet of Things
Cars, medical devices, and other products will continue to be produced with network capabilities, increasing attack surface. There is expected to be 20.4 billion IoT devices connected to the Internet by 2020. With an increasing number of devices coming online, attackers have more potential targets than ever before. Part of the problem with these IoT…
Industry Risks – Cybersecurity in the Workplace is Everyone’s Business
In recent years, a few specific threats have caused significant damage to targeted victims. Ransomware continues to plague numerous industries. Having up-to-date systems and backups are crucial in the defense against ransomware. Insider Threats also cause significant damage to unsuspecting organizations. Monitoring for unusual activity and workforce morale or behavior are important security techniques. An…
Training Resources – Cybersecurity in the Workplace is Everyone’s Business
Having a properly trained staff helps to create a secure working environment. Here’s a few free cybersecurity training and awareness resources available to the public: CSIAC provides numerous training and awareness videos and references on relevant cybersecurity topics. For example: Videos: https://www.csiac.org/podcast The Cybersecurity Digest: https://www.csiac.org/cs-digest Training Resources: https://www.csiac.org/services/csiac-training The Department of Homeland Security provides…
Common Workplace Pitfalls – Cybersecurity in the Workplace is Everyone’s Business
Technology continues to play a critical role in nearly every industry. To protect your organization from the common pitfalls follow a few guidelines: Take the time to motivate and train your employees and coworkers. An untrained workforce leads to weak operational security. Have a security plan and practice it! In the event of a breach,…
Account Security – Simple Steps to Online Safety
Protecting our various login credentials is both difficult and very important! Here are some useful tips for securing social media and email accounts: Create secure passphrases that are at least 12 characters in length Use different passphrases for each account Use a reputable password manager to keep track of your current passwords. Browse CSIAC for…
Phishing – Simple Steps to Online Safety
Phishing is a malicious technique used to steal personal information. Malicious actors often use the stolen information for theft or blackmail. To protect your organization, follow a few guidelines: Train your users to spot email scams and fake offers. Scams often have poor grammar or strange account names. Persistent phishing campaigns are common Increase end-user…
