US DHS releases security strategy
The US Department of Homeland Security (DHS) has unveiled a new strategy detailing its approach to identifying and managing cybersecurity risks at a national level.
“The cyber threat landscape is shifting in real time, and we have reached a historic turning point,” said DHS Secretary Kirstjen M Nielsen.
“Digital security is now converging with personal and physical security, and it is clear that our cyber adversaries can now threaten the very fabric of our republic itself.
“That is why DHS is rethinking its approach by adopting a more comprehensive cybersecurity strategy.
The strategy has a five-part approach:
- Risk identification — assessing the evolving national risk posture to inform and prioritise risk management activities.
- Vulnerability reduction — protecting systems by reducing the vulnerabilities of agencies to ensure they achieve an adequate level of security.
- Threat reduction — countering transnational criminal organisations and sophisticated cybercriminals.
- Consequence mitigation — responding effectively to cyber incidents to thereby minimise consequences from potentially significant cyber incidents through coordinated community-wide response efforts.
- Enable cybersecurity outcomes — supporting policies and activities that enable improved global risk management and execute cybersecurity efforts in an integrated and prioritised way.
“In an age of brand-name breaches, we must think beyond the defence of specific assets… and confront systemic risks that affect everyone from tech giants to home owners,” said Nielsen.
Please follow us and share on Twitter and Facebook. You can also subscribe for FREE to our weekly newsletter and quarterly magazine.
Adobe Acrobat Sign completes IRAP assessment
Adobe says its Acrobat Sign is a cloud-based solution that enables end-to-end digital experiences...
Australia under attack as higher cyber threat activity observed: report
Armis warns that AI is supercharging the cyberwarfare threat amid heightened geopolitical tensions.
Dynatrace secures IRAP certification for Azure-based platform
Dynatrace has received IRAP certification for its Dynatrace SaaS on Microsoft Azure...