Cybercriminals have been outpacing the US, according to former CISA chief Krebs' statement.
In a bold statement, Chris Krebs, a founding partner at Krebs Stamos Group and the former director of the Cybersecurity and Infrastructure Security Agency (CISA), has highlighted the urgent need for the U.S. government to reorganize its approach to cybersecurity.
Krebs asserts that the digital environment has evolved significantly over the past 25 years, yet the government has failed to keep pace. He argues that the focus on advanced persistent threats and nation-state threats has been overemphasized, while cybercriminals have been largely underestimated.
The threat landscape and adversaries are expanding, with an increase in ransomware attacks being a particular concern. Ransomware has become such a significant and costly threat that it is distracting the national security community from focusing on threats from China, Russia, and Iran.
Krebs suggests that minor adjustments are not enough and a major government reorganization is necessary. He proposes the establishment of a digital agency focused on digital risk management across cyber, privacy, trust, and safety. This agency would be responsible for coordinating the government's response to cyber threats and providing organisations with a primary point of contact for assistance in cybersecurity matters.
To further enhance risk management in the cyber and data protection fields, Krebs proposes the creation of the Cyber Safety Review Board. This board would enable a more comprehensive approach to addressing cyber threats and improving the overall security of digital systems.
Krebs also addresses the issue of bureaucratic obstacles that hinder collaboration between organisations and the government. He suggests that CISA could be separated from the Department of Homeland Security and made into a sub-cabinet agency, absent an extensive government agency overhaul.
Another concern raised by Krebs is the U.S. government's hesitancy to establish regulation due to fears of stifling innovation. However, he argues that striking the right balance between innovation and security is crucial for the protection of American citizens.
Krebs emphasizes that any product being shipped or hosted is a potential target for threat actors. If a system is connected to the internet, it is a target for cybercriminals who exploit points of weakness in software and technology dependencies.
In conclusion, Chris Krebs' call for a major government reorganization is a wake-up call for the U.S. government to address the growing threat of cybercrime. The digital environment is evolving rapidly, and the government must adapt to protect American citizens from the increasing risks posed by cybercriminals.
Read also:
- Mural at blast site in CDMX commemorates Alicia Matías, sacrificing life for granddaughter's safety
- Microsoft's Patch Tuesday essential fixes: 12 critical vulnerabilities alongside a Remote Code Execution flaw in SharePoint
- British intelligence agency MI6 establishes a covert dark web platform named 'Silent Courier' in Istanbul for the purpose of identifying and enlisting secret agents.
- Russia intends to manufacture approximately 79,000 Shahed drones by the year 2025, according to Ukraine's intelligence.