CISA and MS-ISAC Join in Statement Recommending Immediate Action against Ransomware

The U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State ISAC (MS-ISAC), both WaterISAC partners, have joined with the National Governors Association and the National Association of State Chief Information Officers in releasing a statement recommending state and local governments take immediate action to safeguard against ransomware attacks. The statement asserts that “the growing number of such attacks highlights the critical importance of making cyber preparedness a priority and take the necessary steps to secure our networks against adversaries.” It highlights “Three Steps to Resilience against Ransomware,” which include: 1) “Back-Up Your Systems – Now (and Daily);” 2) “Reinforce Basic Cybersecurity Awareness and Education;” and 3) “Revisit and Refine Cyber Incident Response Plans.” The statement also includes links to resources from each of the statement’s author organizations with further information about ransomware and planning for cybersecurity incidents. As demonstrated by recent ransomware attacks, such as those involving the Onslow Water and Sewer Authority in October 2018 and multiple Florida cities in the last couple months, these incidents have become increasingly costly and disruptive for victims.