THANK YOU FOR SUBSCRIBING
Government CIO Outlook | Friday, April 01, 2022
Since cyberattacks are unavoidable, every government should build a national incident response and recovery plan to limit the effects of cyber catastrophes and shorten recovery times.
Fremont, CA: One of the most severe risks that nations face today is state-sponsored cyber warfare, which is occurring against a backdrop of growing geopolitical and geoeconomic tensions. State-sponsored cyberattacks are invading the critical infrastructure of countries worldwide, from election manipulation to the alleged attempted theft of COVID-19 vaccine research to power outages for over a quarter-million people. It is undeniably challenging to develop and implement a national cybersecurity plan. As a result, governments must incorporate specific deliberate components of effective initiatives.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
The elements of a National Incident Response and Recovery Plan:
Citizens and corporations must follow a well-established reporting method
Best-in-class countries make it obvious to their citizens and businesses that they should report cyber incidents. For example, in the United Kingdom, the National Cyber Security Centre (NCSC) serves as a single point of contact for all businesses and, increasingly, citizens who wish to report cyber problems. On the back end, it is necessary to establish a single repository across government entities that collects data on all cyber occurrences in the country.
Cyberthreats that are actively monitored
Governments must actively monitor the internet for cyber threats and passively record all reported cybercrimes. For example, the US National Security Operations Center monitors security risks entering the US 24 hours a day, seven days a week, and integrates network patterns with current national-security intelligence to assess threats.
There are numerous sources of danger intelligence
Best-in-class governments build extra channels to supplement established sources of threat intelligence. For example, the United Kingdom launched the Cyber Security Information Sharing Partnership in 2013, which includes a platform where the government and commercial sector can promptly and confidentially share threat intelligence.
Strictly enforced severity-assessment matrix
Each cyber incident is classified by the benchmark countries based on its severity in terms of loss of life, national security, public trust, victim type, and interdependence, among other factors. A significant bank hacking may be classified as a high-severity incident, whereas a small business hacking may be classified as a low-severity incident. A standardized matrix provides a consistent vocabulary for all incident responders to use when dealing with cyber incidents of varying severity levels.
More in News