US Encourages Critical Infrastructure Companies to Prepare Their "Shields"

The United States government has initiated a new program, "Shields Ready," aiming to bolster cyber resilience within organizations handling critical national infrastructure (CNI). This initiative is a follow-up to the "Shields Up" campaign, which was broader in scope, targeting a wide audience with guidance on preparing for, responding to, and mitigating the effects of cyber-attacks.

"Shields Ready" zeros in on refining operational processes and fortifying systems within CNI sectors, in anticipation of cyber threats. The campaign is a collaborative effort by the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Homeland Security (DHS), and the Federal Emergency Management Agency (FEMA). It stands on four pillars:

1. Infrastructure Insight: CNI entities are encouraged to pinpoint their most vital systems and assets and recognize potential dependencies on other infrastructures.
2. Comprehensive Risk Analysis: The initiative calls for a thorough assessment of threats capable of disrupting CNI operations and an examination of system-specific vulnerabilities.
3. Actionable Planning: CNI stakeholders should craft strategic risk management plans to address identified risks and create detailed incident response and recovery strategies to minimize operational disruptions.
4. Ongoing Evaluation and Improvement: The campaign advocates for regular testing of incident response procedures in realistic scenarios, coupled with continuous reassessment and refinement of strategic plans.

CISA Director Jen Easterly highlighted the criticality of ensuring that CNI sectors, which include essential services like healthcare and utilities, have the necessary resources to effectively respond to and recover from incidents. "Shields Ready" is being launched as part of Critical Infrastructure Security and Resilience Month to advance the resilience of systems that the public depends on daily.

Easterly emphasized that proactive measures taken today to prepare for various incidents will enable critical infrastructures and communities to better withstand and bounce back from the threats of tomorrow and beyond.