transportation – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

New ISAC for K-12 school districts fills a key cyber intelligence gap

riskacademy — Thu, 17 Dec 2020 23:23:51 +0000

Roosevelt High School in Portland, Oregon. The Portland Public Schools district is among the first members of K12 SIX. (Visitor7, CC BY-SA 3.0 https://creativecommons.org/licenses/by-sa/3.0, via Wikimedia Commons)

The automotive sector has its own Information Sharing & Analysis Center (ISAC). So do the aviation and maritime industries. They all represent forms of transportation, but no one would say they all face the exact same cyber threat scenarios.

So why have K-12 schools traditionally been lumped in with the public sector and higher education when it comes to ISAC activity? Local education districts have their own distinct challenges as they strive to protect themselves against digital threats. It only makes sense that they have an ISAC of their own.

Now they do.

In October 2020, the Global Resilience Foundation (GRF) – a nonprofit subsidiary of the National Council of ISACs – soft-launched its Kindergarten Through Twelfth Grade Security Information Exchange, or K12 SIX for short. It’s the first-ever ISAC specifically created with local school districts in mind.

The organization already sports roughly one dozen members, with more in…

Securing Cyber-Physical Systems: Overcoming 3 Hurdles to a Holistic Approach

riskacademy — Thu, 13 Aug 2020 19:04:54 +0000

For critical infrastructure organizations and operators to prevent a catastrophic event, they must first understand the risks facing cyber-physical systems

Photo courtesy of Nozomi Networks

Cybersecurity has never been more challenging for industrial organizations. Recent attacks on critical safety systems have shown conventional defenses may not stop sophisticated attackers. Growing political unrest is increasing the likelihood of more sophisticated nation-state breaches against industries that support everyday life, like electric utilities, transportation and manufacturing. The potential risks to safety, operational performance and information confidentiality requires constant vigilance.

For critical infrastructure organizations and operators to prevent a catastrophic event, they must first understand the risks facing cyber-physical systems. A recent survey from Nozomi Networks and Newsweek Vantage of 400 C-level executives from critical infrastructure organizations shows that when it comes to security, these companies have not focused enough on taking a holistic approach to the digital and physical realms. Nearly half of respondents struggle with differences…

Securing Smart Cities of the Future

riskacademy — Mon, 03 Aug 2020 13:03:44 +0000

The future of the world’s population is urban. More than two-thirds of our planet’s population are expected to live in urban areas by 2050, driven by rapid urbanization in Asia and Africa. Even as another 2.5 billion people are expected to be added to our cities over the next three decades, the challenges of providing critical infrastructure and urban services to them, loom large.

As with all other challenges, man is turning towards technology to create better, safer and more efficient cities. From utilities, transportation, traffic, waste management, pollution, sustainable living, to safety, healthcare and governance, smart cities are emerging as the answer to managing growing urban agglomerations.

Smart city initiatives are game changing. Home heating from renewable sources in Yokohama, Barcelona’s digitized waste management systems, smart parking solutions deployed by Canberra, real time public transport monitoring in Groningen or a distributed air quality network at Nijmegen – are just a few examples.

Interconnectivity is a Double-Edged Sword

Smart cities run on the backbone of sensors and IoT devices that are connected – to each other, to control systems and…

Securing Travel and Transportation Operations

riskacademy — Wed, 22 Jul 2020 14:57:20 +0000

Transportation networks are foundational to our modern way of life. The current restrictions on global movement and the corresponding reduction in demand for travel and transportation services, while profound, are temporary. Forecasting future demand and capacity requirements is nearly impossible. But, the travel and transportation industries are part of the country’s critical infrastructure. They will return as significant contributors to global gross domestic product (GDP) and employment.

Although global demand and workforces are currently reduced, threat activity against industries is not. Travel and transportation companies share a common backbone of critical infrastructure and data that are attractive to malicious actors. Travel and transport providers’ global supply chains require the integration of third-party vendors and present an expansive attack surface. Hence, these providers will never be immune to cyber attacks.

According to the X-Force Threat Intelligence Index 2020, IBM X-Force Incident Response and Intelligence Services (IRIS) reported that the transportation sector was the third-most attacked in 2019. This highlights the growing appeal of data and…