Yesterday U.S. Department of Homeland Security (DHS) Secretary Alejandro Mayorkas announced a variety of steps he plans his department to take to further address cyber threats to the nation. Cybersecurity and Infrastructure Security Agency (CISA) will be responsible for or have a significant role in implementing many of these steps, some of which involve building on existing efforts. For example, Mayorkas observes the recent National Defense Authorization Act further empowered CISA to execute its mission, including by providing authorities for CISA to “hunt” for cyber threats in federal agency networks and to more effectively identify vulnerable technologies used by critical infrastructure sectors. To accelerate critical improvements in state and local cybersecurity, CISA will urgently evaluate and implement additional capabilities including potential new grant programs that will enable critical security investments. Secretary Mayorkas will also reinforce CISA’s new “Reduce the Risk of Ransomware” Campaign (reported on in the January 21 Security & Resilience Update) to encourage public and private sector organizations to take action to mitigate ransomware risk. DHS also announced it will leverage the U.S. Secret Service, through its Cyber Fraud Task Forces, to respond to ransomware incidents and arrest those that engage in this criminal activity. According to the announcement, Secretary Mayorkas is slated to participate in several additional engagements in the coming weeks to further highlight how DHS can and will best support its partners in efforts to improve risk management and cybersecurity. Read the announcement at DHS.