无忧传媒

As the nation鈥檚 risk advisor, the Cybersecurity and Infrastructure Security Agency (CISA) is tasked with the mission of leading the national effort to understand, manage, and reduce risk to cyber and physical infrastructure.听The stakes couldn鈥檛 be higher. The agency鈥檚 work encompasses everything from helping secure the U.S. supply chain during crisis, to protecting and facilitating communications during emergencies, to supporting free and fair elections at all levels of government.

Key to CISA鈥檚 mission is the ability to identify, analyze, prioritize, and mitigate both potential and actual cyber risks and attacks on the government and private networks.听Here are some of the challenges they face.

An Attack Surface That Is Growing Exponentially

Many agencies have already begun to migrate data and applications to the cloud in pursuit of the flexibility and cost savings that such solutions provide. The COVID-19 pandemic has accelerated this evolution as unprecedented numbers of personnel have made the transition to remote work, creating a need to accommodate a wide variety of both bring-your-own and agency-provided mobile devices.

This shift, along with the growth in internet of things (IoT), operational technology (OT), and other non-IT devices, is drastically expanding the cyber-attack surface. Bad actors have been all too quick to take advantage of this situation. Recent supply chain attacks have exposed the vulnerabilities in the nation's software code infrastructure and highlighted a lack of supply chain visibility.

The increasing complexity, creativity, and persistence of attacks鈥攁nd the ever-evolving nature of the cyber landscape itself鈥攈elp drive the demand for advanced cyber capabilities to be delivered through an agile cybersecurity framework that brings disparate teams, people, technology, and tools together.

The Need for Visibility Across the Government Landscape

The National Cybersecurity Protection System () is an integrated system-of-systems that delivers a range of capabilities, such as intrusion detection, analytics, information sharing, and intrusion prevention. NCPS also assists more than 100 federal civilian government agencies with guarding their networks and critical data. The large amount of sensor data including endpoint data being collected at the CISA and agency layers makes it increasingly difficult to correlate anomalous behaviors across agencies and maintain adequate visibility.

The move to the cloud where agencies are dealing with hybrid and multicloud deployments, the shift to remote work, and the expanding use of mobile devices have only increased the amount of data to be analyzed. Adoption of advanced cyber analytics helps accelerate the processing of this data to extract valuable insights to detect and mitigate threats.

A Need to Rapidly Deliver New Capabilities

Too often, existing cybersecurity tools either overload analysts with false positives or fail to detect legitimate threats. To get the most out of your operational investment, each tool must be properly architected, integrated, and tuned to ensure optimal effectiveness. And to match the tempo of today鈥檚 threats, agencies must be able to deliver new tools and capabilities quickly, securely, and efficiently, in a wide range of analytics environments.