72 Hours and Counting: Preparing for and Responding to Critical Infrastructure Cyber Incidents

Posted by:

|

On:

|

ICS Cyber Security Conference

Atlanta GA

The Cyber Incident Reporting Act for Critical Infrastructure Act, which was enacted in March 2022, will require critical infrastructure organizations to report cyber incidents to the Cybersecurity and Infrastructure Security Agency (CISA) within 72 hours. This aggressive timeline will require companies to have enhanced identification, escalation, and investigation processes in place.

In this session, we will discuss the new Act, and the practical steps companies should take, both proactively and during an incident, to comply with this and other industry-specific regulations and expectations. We will also discuss the unique cybersecurity threats for critical infrastructure organizations that make the industry particularly vulnerable to a cyberattack and the importance of heightened focus to help prevent and contain incidents.

It was a pleasure to present with Matthew. I know this session was recorded though i’m unsure if it’s public. If/when it is I’ll link here.