Recognizing 2021’s National Critical Infrastructure Security and Resilience Month, Security magazine had the honor of working with security leaders within the public and private sectors to bring you October’s Special Report — comprised of five different features to be used as best practices and resources to assist critical infrastructure organizations in bolstering their security postures to prevent and reduce the risks of disruptions. Our special appreciation goes to Brian Harrell, Vice President and Chief Security Officer at AVANGRID, and to all of the following contributing authors for providing their subject matter expertise:
Daniel Kaniewski, Managing Director of Public Sector, Marsh McLennan
Dr. David Mussington, Executive Assistant Director, Infrastructure Security, Cybersecurity and Infrastructure Security Agency
Scott Aaronson, Vice President, Security and Preparedness, Edison Electric Institute
Kate Ledesma, Resilience and Policy Manager, North American Electric Reliability Corporation, Electricity Information Sharing and Analysis Center
Michael Arcenaux, Managing Director, WaterISAC
Throughout this month, check out stories on specialized security teams for behavioral health, K-12 cybersecurity best practices, mass notification, 5G, building security value, leadership, career advice, and more!
The critical infrastructure public and private sector can look to America’s electric companies for a holistic approach and partnership on supporting essential improvements to security posture and culture.
As threats evolve from emboldened and increasingly sophisticated malicious actors targeting critical infrastructure, the electric sector has developed a holistic and shared-responsibility approach that has supported key improvements to the security posture and culture of electric companies.
Increased reliance on automation and new technologies to assist with meter reading, leak detection and other operational goals have opened a host of attack surfaces. Given the ever-evolving and multi-faceted threat landscape, sharing and collaboration are essential to water and wastewater security and resilience.
Together, cyber and physical assets represent a significant amount of risk to physical security and cybersecurity — each can be targeted, separately or simultaneously, to result in compromised systems and infrastructure.
Given the rising attacks on critical infrastructure and the interconnected mesh of cyber-physical systems, the United States government is looking to better coordinate protection efforts that anticipate and counter criminal groups’ tactics, techniques and procedures, to help prevent attacks from reaching their intended targets.
GridEx has grown to be the largest distributed play exercise of its kind in North America, serving as a critical benchmark that maximizes the ability of organizations to coordinate with neighboring utilities and reliability coordinators to effectively exercise and address grid reliability issues.
GridEx has grown to be the largest distributed play exercise of its kind in North America, serving as a critical benchmark that maximizes the ability of organizations to coordinate with neighboring utilities and reliability coordinators to effectively exercise and address grid reliability issues.
Inova Health System began a Behavioral Health Officer program several years ago with the goal of creating a specialized group of security personnel to reduce workplace violence incidents. Since then, the program has grown, evolved and proven its value to the organization many times over.
Inova Health System began a Behavioral Health Officer program several years ago with the goal of creating a specialized group of security personnel to reduce workplace violence incidents. Since then, the program has grown, evolved and proven its value to the organization many times over.
The critical infrastructure public and private sector can look to America’s electric companies for a holistic approach and partnership on supporting essential improvements to security posture and culture.
As threats evolve from emboldened and increasingly sophisticated malicious actors targeting critical infrastructure, the electric sector has developed a holistic and shared-responsibility approach that has supported key improvements to the security posture and culture of electric companies.
By making resilience a priority for an organization, business leaders can reduce disruptions and lessen the consequences from risks that may materialize. To build a framework for the future, considerations must include preparedness, hazard mitigation, insurance and resilience in the context of emerging risks.
Two school district technology leaders share their first-hand experiences and insights into the cybersecurity vulnerabilities affecting the K-12 sector, along with how to design a security roadmap and the challenges that come along with implementing one.
For the first installation of Security’s Leader to Leader column — for which I will interview security leaders across industries on their careers, their challenges and their views of risk and resilience every few months — I was fortunate to spend time with Shelley Benoliel, Head of Physical Security & Business Resilience at Zoom Communications, to talk about her career and her approach to the security industry.
5G is here and redefining network architecture. Taking responsibility for its advancement in a secure manner has never been more important. Who ultimately is responsible for its associated security?
As a security leader, do you better support the industry and serve your employer by attending in person events or do you play it safe and attend virtually, forgoing the in-person conversations, random encounters, and charged environment that bring so much value to these conferences? Risk professionals needs to weigh look at the data, look at the advice, and weigh the pros and cons of these situations, to maintain their status as a leader within the organization.
A resume or CV is an important component for any job search tool kit. However, there are other, newer ways to enhance or present your qualifications that you may not have previously considered. Taken together, you will have a multitude of options available to showcase your talents to potential employees.
In acknowledgment of the wide-reaching effects that damage to critical infrastructure organizations and systems can impart, Security has dedicated our October 2021 issue to Critical Infrastructure Security. This month, our features cover the challenges and risks associated with this market sector, along with solutions and best practices security leaders can take to mitigate some of those risks. Here, we cover a few simple steps critical infrastructure security leaders can take to proactively build a program of resiliency.