With WWS Sector contributions, guide provides recommended actions and available resources throughout cyber incident response lifecycle.
WASHINGTON - The Cybersecurity and Infrastructure Security Agency, Federal Bureau of Investigation, and Environmental Protection Agency published a guide today to assist owners and operators in the Water and Wastewater Systems Sector with best practices for cyber incident response and information about federal roles, resources and responsibilities for each stage of the response lifecycle.
Technical expertise is not required to understand and use this guide.
Preparation: WWS Sector organizations should have an incident response plan in place, implement available services and resources to raise their cyber baseline, and engage with the WWS Sector cyber community.
Detection and analysis: Accurate and timely reporting and rapid collective analysis are essential to understand the full scope and impact of a cyber incident.
The guidance provides information on validating an incident, reporting levels, and available technical analysis and support.
Containment, eradication, and recovery: While WWS Sector utilities are conducting their incident response plan, federal partners are focusing on coordinated messaging and information sharing, and remediation and mitigation assistance.
Evidence retention, using collected incident data, and lessons learned are the overarching elements for a proper analysis of both the incident and how responders handled it.
All WWS utilities are encouraged to use this incident response guide to augment their incident response planning and collaboration with federal partners and the WWS before, during, and following a cyber incident.
Familiarity with this guide will better prepare WWS utilities to respond to-and recover from-a cyber incident.
About CISA. As the nation's cyber defense agency and national coordinator for critical infrastructure security, the Cybersecurity and Infrastructure Security Agency leads the national effort to understand, manage, and reduce risk to the digital and physical infrastructure Americans rely on every hour of every day.
This Cyber News was published on www.cisa.gov. Publication date: Thu, 18 Jan 2024 16:13:05 +0000