CISA Issues Guidance to Strengthen Cyber Posture of Civil Society Organizations; Jen Easterly Quoted

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a guidance document aimed at helping civil society organizations strengthen their cyber posture against cybersecurity threats, particularly those posed by state-sponsored actors. The document, titled “Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society,” provides several recommendations for civil society organizations to protect themselves from cyber attacks.

According to CISA, the guidance document is designed to help civil society organizations, which often have limited resources and expertise, protect themselves against sophisticated cyber threats. The document emphasizes the importance of implementing basic cybersecurity practices, such as using strong passwords, keeping software up to date, and being cautious when sharing information online.

One of the key recommendations in the document is for civil society organizations to choose vendors that abide by Secure by Design principles. This means selecting vendors that prioritize security in the design and development of their products, rather than bolting it on as an afterthought. By choosing vendors that adhere to these principles, civil society organizations can reduce their risk exposure and improve their overall cyber posture.

Another important recommendation is for civil society organizations to exercise caution when sharing information via social media. Threat actors often use social engineering tactics to trick individuals into divulging sensitive information or clicking on malicious links. By being mindful of what they share online and with whom, civil society organizations can reduce their risk of falling victim to these types of attacks.

Implementing phishing-resistant multifactor authentication is also a key recommendation in the document. Multifactor authentication adds an extra layer of security beyond just a password, making it more difficult for threat actors to gain unauthorized access to systems and data. By implementing this measure, civil society organizations can better protect their sensitive information and systems.

Commenting on the release of the guidance document, CISA Director and 2024 Wash100 winner Jen Easterly noted that threat actors have sought to exploit the perceived vulnerabilities of civil society organizations. She emphasized the importance of these organizations taking proactive steps to protect themselves against cyber threats, particularly as they often work with sensitive information and may not have the resources to devote to cybersecurity.

The guidance document is part of CISA’s efforts to support the cybersecurity of civil society organizations, which play a critical role in promoting democracy, human rights, and social justice. By providing these organizations with the tools and resources they need to protect themselves against cyber threats, CISA aims to help them continue their important work without interruption or compromise.

In conclusion, the guidance document issued by CISA provides valuable recommendations for civil society organizations looking to strengthen their cyber posture. By following these guidelines, organizations can better protect themselves against cyber threats and continue their mission-critical work unimpeded. It is important for all organizations, regardless of size or resource, to prioritize cybersecurity and take proactive steps to safeguard their sensitive information and systems.