In a gathering right now, a United States Senate committee examined new measures to reinforce federal reporting for cybersecurity vulnerabilities that threaten “important infrastructure”. They convened in an try to ascertain new help for state and native governments confronting threats like ransomware.
A brand new period in homeland safety?
The centerpiece of the March 11 listening to of the Committee on Homeland Security is invoice S. 3045, the Cybersecurity Vulnerability Identification and Notification Act of 2019. First launched in December, the brand new invoice appears to amend the landmark Homeland Security Act of 2002 to incorporate new provisions aimed particularly at cybersecurity.
The “Cybersecurity Vulnerability Identification and Notification Act” particularly targets situations when the Cybersecurity and Infrastructure Security Company (CISA) identifies cyber vulnerabilities in important infrastructure that they can not report. The invoice authorizes CISA to subpoena for this info after they uncover vulnerabilities.
Committee Chairman Ron Johnson (R-WI) stated of the invoice:
“That is an extremely essential piece of laws. I do know there’s some concern about it, I feel as a result of there’s misinformation.”
Preventing ransomware from the federal degree
One other topic of right now’s assembly was the Cybersecurity State Coordinator Act of 2020, which additionally appears to develop CISA’s purview. Sponsored by Sen. Margaret Hassan (D-NH), the invoice appears to unfold federal protections dealing with cyber threats that states might lack the infrastructure to deal with themselves — particularly citing ransomware.
The Cybersecurity State Coordinator Act would require the director of CISA to nominate a separate coordinator of cyber defenses for every of the 50 states. This is able to facilitate “the sharing of cyber risk info between Federal and non-Federal entities.”
Municipal governments have struggled to handle the specter of ransomware. Town authorities of Atlanta famously fell sufferer to ransomware again in 2018. Extra just lately, the South African metropolis of Johannesburg skilled an analogous assault in October of 2019.